Privacy guide
Publishing a policy for the Apple App Store
The linked notice, App Privacy responses, permission purpose strings, App Tracking Transparency behavior, and actual data flows should tell one consistent story.
Review linked and tracking data
Apple's disclosure vocabulary distinguishes data linked to identity and data used to track across other companies' apps or websites.
Check provider SDK defaults
Analytics, crash, authentication, advertising, attribution, and social SDK defaults can process more than the app's own interface suggests.
Keep account choices reachable
Account deletion and privacy request methods should work from the app or a clearly linked web route and explain justified retained records.