43 lines
3.6 KiB
Markdown
43 lines
3.6 KiB
Markdown
---
|
|
name: account-deletion
|
|
description: Make account deletion pass App Store and Google Play review for an app with sign-up or sign-in - Apple Guideline 5.1.1(v) in-app deletion (the whole account, not deactivation; Sign in with Apple token revocation; subscription billing note), Google Play's in-app path plus a public web page declared in Data safety, the config (accounts.enabled, deletionUrl, inApp) and the storebound checks. Use when the app has accounts, when the user adds sign-up, or after a 5.1.1(v) / Play account deletion rejection.
|
|
---
|
|
|
|
# Account deletion (both stores)
|
|
|
|
Applies to every app that lets people create an account (email, phone, social sign-in, Sign in with Apple). Games
|
|
without accounts can skip it. Sources: Apple, "Offering account deletion in your app"
|
|
(https://developer.apple.com/support/offering-account-deletion-in-your-app/) and App Review Guideline 5.1.1(v)
|
|
(https://developer.apple.com/app-store/review/guidelines/); Google Play, "Understanding Google Play's app account
|
|
deletion requirements" (https://support.google.com/googleplay/android-developer/answer/13327111).
|
|
|
|
## What the stores require
|
|
- **Apple 5.1.1(v)**: people can **start** deleting their account **inside the app**, easy to find (e.g. Settings >
|
|
Account > Delete account). Delete the whole account and its personal data, not only deactivate it. A link to a web
|
|
page that completes the deletion is fine; "email or call us" is only acceptable in highly regulated industries.
|
|
With Sign in with Apple, revoke the user's tokens (Sign in with Apple REST API). With auto-renewable
|
|
subscriptions, tell people that billing continues through Apple until they cancel, and how to cancel.
|
|
- **Google Play**: if the app lets people create an account, it must offer deletion **in the app** and on a **web
|
|
page** people can reach without the app (no reinstall needed). The URL goes into the Data safety form ("Data
|
|
deletion"). People can also ask to delete some data without deleting the account; say how.
|
|
|
|
## Steps
|
|
1. Config: `accounts: { enabled: true, deletionUrl: 'https://example.com/delete-account', inApp: 'Settings > Account >
|
|
Delete account' }`. `storebound check` errors without `deletionUrl` (Play) and warns without `inApp` (Apple);
|
|
`storebound apple review-details` adds "Account deletion: <inApp>" to the review notes.
|
|
2. Web page at `deletionUrl`: names the app and developer, the steps to request deletion (sign in, or a form that
|
|
verifies the email), what is deleted and what is kept (and for how long, e.g. invoices for tax law), and how long it
|
|
takes. No login wall to read it. `storebound validate --play` checks that it answers.
|
|
3. In the app: a clear entry, a confirmation step, then the deletion (or the web page). Sign people out afterwards.
|
|
4. Play Data safety: `dataSafety.deletionRequest: true`, `accountCreation` set to the sign-up methods you offer (not
|
|
`PSL_ACM_NONE`). Google does not publish the question ids for the delete-account URL: export the form once
|
|
(Play Console > App content > Data safety > Export to CSV), copy the id, and add it as
|
|
`dataSafety.extra: [{ question: '<id>', value: '<deletionUrl>' }]`; otherwise enter the URL in the Console after
|
|
`storebound play data-safety`.
|
|
5. Privacy policy: a "Deleting your account" section with both paths (`privacy-policy` skill).
|
|
6. Test it on a fresh account before every submission; the reviewer will.
|
|
|
|
## Gotchas
|
|
- "Deactivate" or "contact support" is not deletion for Apple.
|
|
- Deleting the account does not cancel a store subscription: say so in the app and on the web page.
|
|
- Keep the in-app path, the web page, Data safety and the privacy policy saying the same thing.
|