iOS Privacy Manifest and SDK Compliance Checklist Builder
Create an App Store readiness checklist for iOS privacy manifests, third-party SDKs, required reason APIs, and data collection disclosures.
Prompt Template
You are a senior iOS engineer and privacy compliance reviewer. Build an iOS Privacy Manifest and SDK compliance checklist for: **App name and purpose:** [describe the app] **iOS target and Xcode version:** [versions] **Release type:** [new app / major update / hotfix / rejected build] **Third-party SDKs:** [analytics, ads, payments, auth, crash reporting, maps, etc.] **Data collected:** [contact info, location, identifiers, diagnostics, purchases, user content] **Required Reason APIs used:** [file timestamps, disk space, UserDefaults, active keyboard, system boot time, etc.] **Current privacy files:** [PrivacyInfo.xcprivacy exists? SDK manifests?] **App Store Connect answers:** [known / unknown / need review] **Constraints:** [deadline, team size, legal review availability] Produce a practical compliance plan with: 1. **Executive risk summary** — likely blockers and confidence level. 2. **SDK inventory table** — SDK, purpose, data collected, manifest status, owner, action needed. 3. **PrivacyInfo.xcprivacy checklist** — required keys, tracking domains, collected data types, linked/not linked, tracking use. 4. **Required Reason API audit** — API category, usage location, approved reason, evidence, remediation. 5. **Data flow map** — what data leaves the device, where it goes, and retention assumptions. 6. **App Store Connect answer review** — mismatches to investigate before submission. 7. **Codebase search plan** — filenames, grep patterns, dependency checks, and build inspection steps. 8. **QA validation checklist** — install, consent, permissions, analytics, logs, and network proxy checks. 9. **Release blockers vs follow-ups** — what must be fixed before upload and what can be tracked later. 10. **Engineering task list** — tickets with acceptance criteria. Be specific, avoid legal claims, and label anything that requires counsel or vendor confirmation.
Example Output
# iOS Privacy Manifest Checklist: FitTrail 4.2
Executive Risk Summary
**Risk level:** Medium. The app uses analytics, crash reporting, location, and UserDefaults. The likely App Store blockers are missing SDK manifests for an older attribution SDK and unclear Required Reason API usage for UserDefaults.
SDK Inventory
| SDK | Purpose | Manifest Status | Action | Owner |
|---|---|---|---|---|
| Firebase Analytics | product analytics | Included in current version | Confirm collected data matches ASC | iOS lead |
| Sentry | crash reporting | Included | Verify diagnostics disclosure | mobile platform |
| LegacyAttribution 2.1 | campaign attribution | Unknown | Upgrade or request manifest from vendor | growth eng |
Required Reason API Audit
- **UserDefaults:** used for onboarding flags and preferred distance unit. Approved reason likely CA92.1 if used for app functionality only. Add evidence: `SettingsStore.swift`, `OnboardingState.swift`.
- **File timestamp APIs:** used by cache cleaner. Confirm reason category and document cache-maintenance purpose.
App Store Connect Review
- Location is collected for route recording and linked to user account. Make sure ASC says precise location is collected and linked.
- Crash diagnostics are collected through Sentry and should be disclosed as diagnostics.
Release Blockers
1. Replace or upgrade LegacyAttribution SDK.
2. Add PrivacyInfo.xcprivacy entries for location, diagnostics, identifiers, and UserDefaults reason.
3. Run network proxy QA on first launch, login, workout start, and crash simulation.
Tips for Best Results
- 💡Start with SDK inventory; third-party SDK gaps are often the slowest to resolve.
- 💡Tie every Required Reason API entry to actual source files so reviewers can verify intent.
- 💡Compare PrivacyInfo.xcprivacy with App Store Connect answers — mismatches create avoidable review risk.
- 💡Do not guess vendor behavior; flag unknown SDK data collection for vendor confirmation.
Related Prompts
Code Review Assistant
Get a thorough, senior-level code review with actionable feedback on quality, security, performance, and best practices.
Debugging Detective
Systematically debug errors and unexpected behavior with root cause analysis and fix suggestions.
Code Refactoring Advisor
Transform messy, complex code into clean, maintainable, well-structured code with clear explanations.