Apple Privacy Manifest

Starting with iOS 17, Apple requires privacy manifests for SDKs to help app developers better understand how third-party SDKs use data. A privacy manifest is a file that details the privacy practices of an app or its third-party SDKs.

In the manifest, you must declare the types of data you collect, using specific categories provided by Apple. You must also state the purpose for collecting the data. As of Spring 2024, any new app or app update submission that integrates a third-party SDK must include the privacy manifest for that SDK.

Available InVersion
MobilePush SDK for iOS8.1.2 and newer

Apple lists the required reason APIs that could potentially be misused. It’s mandatory for third-party SDKs, such as the MobilePush SDK, to declare the APIs used so that a developer can verify they’re being used for the expected reasons.

MobilePush SDK uses the following Required Reason API, which is declared in the SDK’s privacy manifest.

API TypeReasonComments
NSPrivacyAccessedAPICategoryUserDefaultsCA92.1MobilePush SDK uses NSPrivacyAccessedAPICategoryUserDefaults to persist SDK settings related to data migration, SDK privacy mode, and API sync retry timestamp.
Available InVersion
MobilePush SDK for iOS9.0.0 and newer

To maintain transparency and let developers verify the expected usage, Apple requires that third-party SDKs, such as the MobilePush SDK, clearly declare the types of data collected in privacy manifest files.

MobilePush SDK uses the following Collected Data Type, which is declared in the SDK’s privacy manifest:

API TypeLinked to UserUsed for TrackingCollection PurposesComments
NSPrivacyCollectedDataTypeOtherDataTypesNoNoNSPrivacyCollectedDataTypePurposeAnalyticsMobilePush SDK uses NSPrivacyCollectedDataTypePurposeAnalytics to gather data that helps understand the effectiveness of existing features, plan new features, or measure audience size and characteristics.