storebound/skills/account-deletion/SKILL.md

name

description

account-deletion

Make account deletion pass App Store and Google Play review for an app with sign-up or sign-in - Apple Guideline 5.1.1(v) in-app deletion (the whole account, not deactivation; Sign in with Apple token revocation; subscription billing note), Google Play's in-app path plus a public web page declared in Data safety, the config (accounts.enabled, deletionUrl, inApp) and the storebound checks. Use when the app has accounts, when the user adds sign-up, or after a 5.1.1(v) / Play account deletion rejection.

Account deletion (both stores)

storebound scan finds sign-up and sign-in code (Firebase Auth, Supabase, Google / Facebook / Apple sign-in, custom endpoints) without a deletion path (5.1.1(v)) and accounts without accounts.deletionUrl (Play): run it after adding deletion.

Applies to every app that lets people create an account (email, phone, social sign-in, Sign in with Apple). Games without accounts can skip it. Sources: Apple, "Offering account deletion in your app" (https://developer.apple.com/support/offering-account-deletion-in-your-app/) and App Review Guideline 5.1.1(v) (https://developer.apple.com/app-store/review/guidelines/); Google Play, "Understanding Google Play's app account deletion requirements" (https://support.google.com/googleplay/android-developer/answer/13327111).

What the stores require

• Apple 5.1.1(v): people can start deleting their account inside the app, easy to find (e.g. Settings > Account > Delete account). Delete the whole account and its personal data, not only deactivate it. A link to a web page that completes the deletion is fine; "email or call us" is only acceptable in highly regulated industries. With Sign in with Apple, revoke the user's tokens (Sign in with Apple REST API). With auto-renewable subscriptions, tell people that billing continues through Apple until they cancel, and how to cancel.
• Google Play: if the app lets people create an account, it must offer deletion in the app and on a web page people can reach without the app (no reinstall needed). The URL goes into the Data safety form ("Data deletion"). People can also ask to delete some data without deleting the account; say how.

Steps

1. Config: accounts: { enabled: true, deletionUrl: 'https://example.com/delete-account', inApp: 'Settings > Account > Delete account' }. storebound check errors without deletionUrl (Play) and warns without inApp (Apple); storebound apple review-details adds "Account deletion: " to the review notes.
2. Web page at deletionUrl: names the app and developer, the steps to request deletion (sign in, or a form that verifies the email), what is deleted and what is kept (and for how long, e.g. invoices for tax law), and how long it takes. No login wall to read it. storebound validate --play checks that it answers.
3. In the app: a clear entry, a confirmation step, then the deletion (or the web page). Sign people out afterwards.
4. Play Data safety: dataSafety.deletionRequest: true, accountCreation set to the sign-up methods you offer (not PSL_ACM_NONE). Say how people sign up in accounts.signUp and storebound scan proposes it: username (a name picked in the app, no password, no email; a server token on the device) is Play's "Username and other authentication" (PSL_ACM_USER_ID_OTHER_AUTH) with User ID as the only account data; username-password and email-password are "Username and password" (PSL_ACM_USER_ID_PASSWORD); email-link and phone are PSL_ACM_USER_ID_OTHER_AUTH; oauth is PSL_ACM_OAUTH; other is PSL_ACM_OTHER. An account alone never means an email address: declare Email only when the app asks for one. Google does not publish the question ids for the delete-account URL: export the form once (Play Console > App content > Data safety > Export to CSV), copy the id, and add it as dataSafety.extra: [{ question: '<id>', value: '<deletionUrl>' }]; otherwise enter the URL in the Console after storebound play data-safety.
5. Privacy policy: a "Deleting your account" section with both paths (privacy-policy skill).
6. Test it on a fresh account before every submission; the reviewer will.

Gotchas

• "Deactivate" or "contact support" is not deletion for Apple.
• Deleting the account does not cancel a store subscription: say so in the app and on the web page.
• Keep the in-app path, the web page, Data safety and the privacy policy saying the same thing.