I'm developing a (XC) 3rd party framework, but the framework doesn't use any privacy access API as listed in listed in this document. Do I still need to include the PrivacyManifest.xcprivacy file which will have empty content into the framework?
Replies
Add a privacy manifest to your framework if your framework requires it. To determine if your framework needs a privacy manifest, see Upcoming third-party SDK requirements, Describing use of required reason API, and Describing data use in privacy manifests.
If your framework doesn't require a privacy manifest, do nothing. Avoid adding an empty privacy manifest to your framework.
but the framework doesn't use any privacy access API as listed in listed in this document.
Confirm that your framework doesn't repackage an SDK on the list of third-party SDKs requiring a privacy manifest and signature. If your framework does, then you need to add a privacy manifest to it.
-
Hi @DTS Engineer One of our apps still depends on AFNetworking which was included in Apple SDKs list by using Cocoapods (worth to mention that this project is archived and will no receive any updates). We checked the code and it does not use any of the listed APIs. Do we still need to add Privacy Manifest for this SDK? We are actively working on adding Privacy Manifests to our dependencies and to our project itself.
-
but the framework doesn't use any privacy access API as listed in listed in this document.
Where is the above statement found in the Apple official documentation? Thanks!
-
In this link (https://developer.apple.com/support/third-party-SDK-requirements/), the flutter_inappwebview SDK is listed, but it doesn't actually use any required APIs. Does that mean other SDKs or apps using flutter_inappwebview don't need to add a privacy manifest file?
—
@DTS Engineer
I've checked SPM libraries on GitHub. Among them, I can see some empty in PrivacyInfo.
Many libraries are doing this, will this be a problem??
Posted
by
Share this post
Copied to Clipboard
@DTS Engineer , we have added empty manifests because we worry that people will not be able to tell the difference between these situations:
- there is no manifest because we use no APIs requiring reason codes and we collect no data
- there is no manifest because we did not check if we needed a manifest
Is there any penalty for adding an empty manifest?
Posted
by
Share this post
Copied to Clipboard
-
In fact, the most obvious thing is to do the screening yourself. There is no problem with the screening even if you submit an empty menifest.
—
-
—
kimjitae
-
—
jdheeraj11
-
—
kimjitae
Add a CommentI'm curious about this, too.
I am curious too, but I think you can still code sign the framework.
@jdheeraj11 Isn't code signing done only by the libraries presented by Apple??
I think the libraries that are not that will only need PrivacyInfo.. I may be wrong. Please share your opinion.