App Store rejection reasons, explained and checkable

Guideline 2.1 — App Completeness

"We discovered one or more bugs in your app" / "Information Needed" / "the app crashed on launch"

• PB-30 Development server references left in the build
• PB-33 Dead links inside the app
• PB-34 Embedded framework missing — crash on launch
• PB-35 Missing arm64 slice / unsupported architecture
• PB-36 Minimum iOS in Info.plist does not match the binary
• PB-42 WKWebView links open in a new window but nothing handles the popup
• PB-43 Localized resources shipped but CFBundleLocalizations not declared
• PB-46 Sign in with Apple code present but the entitlement is missing
• PB-47 Google Sign-In SDK without its URL scheme — sign-in cannot return to the app
• PB-48 Facebook SDK without FacebookAppID — crashes at launch
• PB-49 Native Firebase without GoogleService-Info.plist — crashes at launch
• PB-52 Placeholder text (Lorem ipsum) shipped in the build

Guideline 2.3 — Accurate Metadata

"Your app's metadata contains placeholder or inaccurate content" / "the name, description or keywords reference other platforms or apps"

• PB-25 Version or build number missing/invalid

Guideline 2.4.1 — iPad compatibility

"We found that your app did not run at iPad resolution" / "the app does not support all orientations on iPad"

• PB-31 iPad supported but orientations incomplete without UIRequiresFullScreen

Guideline 2.5.1 — Software Requirements — public APIs only

"Your app uses or references the following non-public or deprecated APIs" (ITMS-90338) / "The app references UIWebView" (ITMS-90809)

• PB-27 Entitlement granted but capability never used
• PB-29 App Transport Security disabled for all connections
• PB-37 Non-public API reference (ITMS-90338)
• PB-38 UIWebView still referenced (ITMS-90809)
• PB-41 External accessory (MFi) protocols declared but no accessory code

Guideline 2.5.2 — Downloading executable code

"Your app downloads or installs executable code" / "the app includes a mechanism to update itself outside the App Store"

• PB-16 Runtime code download / execution risk

Guideline 2.5.4 — Background modes

"Your app declares support for audio/location/VoIP in the UIBackgroundModes key but does not include features that require that mode"

• PB-28 Background mode declared but not used

Guideline 3.1.1 — In-App Purchase

"Your app offers in-app purchases but does not include a mechanism to restore them" / "the app directs users to external purchasing mechanisms"

• PB-14 In-app purchases without a "Restore Purchases" path
• PB-15 Possible external payment link for digital content

Guideline 3.1.2 — Subscriptions

"Your app's binary or metadata is missing required information about auto-renewable subscriptions: a functional link to the Terms of Use (EULA)" / "the app offers a free trial that is not configured as an introductory offer"

• PB-44 "Free trial" wording in the app — verify an introductory offer exists in App Store Connect
• PB-45 Auto-renewable subscription without Terms of Use (EULA) wording in the app

Guideline 4.2 — Minimum Functionality

"Your app provides a limited user experience as it is not sufficiently different from a mobile browsing experience"

• PB-20 Looks like a website wrapper (minimum functionality)

Guideline 4.3 — Design — Spam

"We noticed your app shares a similar binary, metadata, and/or concept as apps submitted to the App Store by you or other developers"

• PB-39 Template / starter-kit fingerprint

Guideline 4.8 — Login Services — Sign in with Apple

"Your app uses a third-party login service but does not offer Sign in with Apple as an equivalent option"

• PB-19 Third-party social login without Sign in with Apple

Guideline 5.1.1 — Data Collection and Storage

"Your app's Info.plist does not include a purpose string" / "the app is missing a privacy manifest" / "the app supports account creation but does not include an option to delete the account"

• PB-01 Camera used without a usage description
• PB-02 Photo library used without a usage description
• PB-03 Location used without a usage description
• PB-04 Microphone used without a usage description
• PB-05 Contacts used without a usage description
• PB-06 Calendar used without a usage description
• PB-07 Bluetooth used without a usage description
• PB-08 Face ID used without a usage description
• PB-10 Privacy manifest (PrivacyInfo.xcprivacy) missing
• PB-11 Privacy manifest says tracking but lists no tracking domains
• PB-12 Required Reason API used but not declared in the privacy manifest
• PB-21 ATT prompt text present but manifest says no tracking
• PB-22 Known ad/analytics SDK without its own privacy manifest
• PB-26 Permission declared in Info.plist but never used
• PB-40 Account creation without an in-app account deletion path
• PB-53 Purpose string does not say why the permission is needed

Guideline 5.1.2 — Data Use and Sharing — tracking

"Your app uses the AppTrackingTransparency framework, but we are unable to locate the App Tracking Transparency permission request" / "the privacy label does not match"

• PB-09 Tracking (IDFA) without App Tracking Transparency prompt text
• PB-13 ATT used but the tracking usage description is empty

Export compliance — Encryption declaration (ITSAppUsesNonExemptEncryption)

"Missing Compliance" in App Store Connect / "your app uses encryption; provide export compliance documentation"

• PB-17 ITSAppUsesNonExemptEncryption key missing
• PB-18 Encryption declaration may contradict binary contents

Provisioning & signing — Profile, entitlements and capabilities

"Invalid Provisioning Profile" / "the provisioning profile has expired" / "the app contains entitlements that were not enabled"

• PB-23 Provisioning profile expired
• PB-24 Push entitlement present but remote-notification background mode missing

Other checks

• PB-32 Placeholder or test wording in the app name
• PB-50 App icon not declared — App Store Connect refuses the build
• PB-51 References to Android / Google Play in the bundle
• PB-54 No launch screen storyboard declared