Tracking (IDFA) without App Tracking Transparency prompt text
Check PB-09 · App Store Review Guideline 5.1.2 · Likely rejection when present · verified 2026-09-16
Why App Review rejects under Guideline 5.1.2
Tracking means linking user or device data with third-party data for advertising or sharing it with a data broker. If the build contains an ad or attribution SDK, the App Privacy label must say so and the ATT prompt must appear; if the label says you track but the reviewer never sees the prompt, that is a 5.1.2 rejection. The scan checks the SDKs and the ATT symbol; the label lives in App Store Connect and can be pasted into the listing check.
How to fix it
You must ask the user for tracking permission and explain why. Expo: install expo-tracking-transparency and add NSUserTrackingUsageDescription. Swift: add NSUserTrackingUsageDescription to Info.plist and call ATTrackingManager.requestTrackingAuthorization.
How RejectProof detects it
The scan reads your .ipa in the browser (or locally with npx rejectproof): Info.plist, entitlements, the privacy manifest, embedded frameworks and the executable itself. Check PB-09 reports the exact evidence it found — the key, the symbol, the file or the URL — so you can confirm it in your own project before changing anything. Nothing is uploaded; only a small redacted summary is sent to build the report, and you see it first.