I am working on a financial application that falls under Indian jurisdiction, which has specific regulations prohibiting the use of relay or proxy emails for sign-up processes. Given that the "Hide My Email" feature in "Sign in with Apple" provides a relay email, I'm trying to understand how I can remain compliant with these regulations while offering "Sign in with Apple" as a sign-up option.
My proposed flow:
-
Allow users to use "Sign in with Apple" for authentication.
-
Check if the user has opted for the "Hide My Email" feature.
-
If they have, show an error message explaining the regulatory restriction and prompt them to either:
-
a) Use "Sign in with Apple" without the "Hide My Email" option OR
-
b) Use our standard "Sign up with Email and Password" flow.
I would like to understand if such an approach is acceptable according to Apple's guidelines. Would there be any issues or recommendations from Apple's side on implementing this flow?
Thank you for your assistance and guidance!
