How to check if you use a required reason API

[vinhnx]

In this blog post, I'll share a shell script that helps you to identify if your code base might use a required reason API.

What are "required reason APIs"

Apple classified several APIs that can be misused to access device signals to try to identify the device or user (a.k.a fingerprinting).

The APIs were grouped as follows:

File timestamp APIs
System boot time APIs
Disk space APIs
Active keyboard APIs
User defaults APIs
The actual list of "required reason API", consisting of UserDefaults, ProcessInfo.systemUptime and many others, can you find here.

Why check and declare "required reason APIs"

Starting in fall 2023, when you upload a new app or app update to App Store Connect that uses such an API (might be from third-party SDKs) that requires a reason, you’ll receive a notice if you haven’t provided an approved reason in your app’s privacy manifest.

https://blog.eidinger.info/how-to-check-if-you-use-a-required-reason-api