Guideline 5.1.1
Guideline 5.1.1 - Privacy: HealthKit Without Required Descriptions
Our Take
Your app has the HealthKit entitlement but is missing required Info.plist usage descriptions. Health data apps receive extra scrutiny during Apple review.
Resolution Guide
Add both required usage descriptions
In Info.plist, add:
NSHealthShareUsageDescription — why you need to READ health data. Example: "Chain reads your heart rate and workout data to show real-time stats during rides." - NSHealthUpdateUsageDescription — why you need to WRITE health data. Example: "Chain saves your cycling workouts to Apple Health so they appear in your Activity rings."
Request only the data types you need
In your HKHealthStore.requestAuthorization call, only include the specific HKObjectTypes your app uses. Don't request all types. Apple compares what you request against what your app actually does.
Add HealthKit to required device capabilities
If your app requires HealthKit to function, add healthkit to UIRequiredDeviceCapabilities in Info.plist. If HealthKit is optional, omit this.
Handle authorization denial gracefully
Users can deny individual health data types. Your app must work (possibly with reduced functionality) when specific types are denied. Never crash or show error dialogs.
Complete the App Privacy section
In App Store Connect, declare health data under "Health & Fitness" in the App Privacy section. Specify whether data is linked to the user's identity and what it's used for.
Prevention:
Community Solutions · 0
Sign in to share your solution.
More Guideline 5 (Legal) rejections
- Guideline 5 - Legal: Remove Watermark Feature
- Guideline 5.1.1 - Data Collection and Storage: Incomplete Privacy Manifest
- Guideline 5.1.1 - Data Collection and Storage: Missing Purpose Strings
- Guideline 5.1.1 - Data Collection and Storage: Privacy Manifest Missing
- Guideline 5.1.1 - Data Collection and Storage: Privacy Nutrition Label Mismatch
- Guideline 5.1.1 - Data Collection and Storage: Privacy Policy