Apple Privacy Manifest
Apple is introducing a new privacy policy that requires the inclusion of privacy manifest file, named PrivacyInfo.xcprivacy, in all new and updated apps designed for iOS, iPadOS, tvOS, and visionOS platforms on the App Store. The privacy manifest file catalogs the kinds of data collected by your apps or any third-party SDKs, along with the rationale for utilizing specific categories of Required Reason APIs.
Apple offers guidelines on how to create privacy manifest.
Keep your privacy manifest files updated as your app evolves and as you integrate new third-party libraries. Regularly review and update the files to accurately represent your app's data usage practices.
With Xcode 15 or later versions, all the privacy manifests from an app and its third-party SDKs are automatically consolidated into a single privacy report. This report offers a comprehensive list of the 'Required Reason' APIs and serves as a valuable tool for developers to generate more precise Privacy Nutrition Labels.
Webex Connect iOS SDK Privacy Manifest
Required Reason APIs
Apple offers a list of 'Required Reason' APIs that could possibly be misused for user fingerprinting. However, the mere usage of these APIs does not necessarily imply that the app or third-party SDK is exploiting them for user tracking. Nevertheless, these APIs must be declared in the manifest, accompanied by a legitimate explanation for their usage.
The Webex Connect iOS SDK uses below APIs:
API | Reason |
---|---|
User Defaults | CA92.1 Access info from same app, per documentation. |
Customers are responsible for conducting an audit of their app's API usage to determine if any restricted APIs are in use. If they are, the app must generate its own privacy manifest that outlines which APIs are being used and the reasons for their usage.
Privacy Nutrition Labels
Privacy Nutrition Labels enable users to gain a clearer understanding of the types of information that your app gathers.
Webex Connect SDK collects below Data:
DATA | LINKED TO USER | USED FOR TRACKING | REASON FOR COLLECTION |
---|---|---|---|
User ID | Yes | No | App Functionality |
Precise Location | Yes | No | App Functionality |
Product Interaction | No | No | App Functionality |
Device ID | No | No | App Functionality |
It is essential for customers to review their own implementation and confirm the data they are collecting. Additionally, they need to understand how this data is being utilized outside of Webex Connect SDK.
Tracking
Webex Connect iOS SDK does not collect any data that falls under the protection of the App Tracking Transparency framework. As a result, the tracking status is marked as 'False’, and no tracking domains are listed in iOS SDK’s privacy manifest.
See Apple developer documentation for more details.
Updated 10 months ago