Account Deletion Check

Skill: Account Deletion Check

Purpose

Detects missing or insufficient in-app account deletion functionality required since June 30, 2022 under Guideline 5.1.1(v) for all apps that support account creation.

Apple Guideline

• Primary: 5.1.1(v) — Data Collection and Storage: Account Deletion
• Related: 5.1.1(i), 5.1.1(iii)
• Reference: references/guidelines/5-legal.md

Real-World Rejection Cases

• Case: App supporting account creation rejected after June 30, 2022 for not having in-app account deletion

Source: https://developer.apple.com/news/?id=12m75xbj Root cause: Required since June 30, 2022 — all apps that support account creation must allow deletion within the app, not just via email request or external link

• Case: App offered "Deactivate Account" but not true deletion — rejected

Source: Apple Developer Forums thread/254032717 Root cause: Deactivation is not deletion — Apple requires permanent account and data deletion option; temporarily disabling access does not satisfy the requirement

• Case: App using Sign in with Apple did not revoke the Apple identity token when user deleted their account — rejected; account deletion was incomplete without credential revocation

Source: Apple TN3194 (developer.apple.com/documentation/technotes/tn3194) Root cause: Account deletion must include calling Apple's token revocation endpoint to invalidate the Sign in with Apple credential; local-only deletion without server-side token revocation is considered incomplete account deletion

Trigger

Invoke on any iOS/macOS project that includes user account creation, login, or sign-up flows.

Inputs

| Name | Type | Default | Description | |------|------|---------|-------------| | project_root | path | cwd | iOS/macOS project root | | shared_context | object | nil | Pre-collected context from appstore-full-audit Phase 1 |

Actions

Phase 1: Context Collection

Skip this phase if shared_context is provided.

1. Glob **/*.swift — collect all Swift source files.
2. Glob **/Settings*View* or **/Account*View* or **/Profile*View* — locate account management UI files.
3. Glob **/Auth* or **/Login* or **/Signup* or **/Register* — locate authentication flow files to confirm account creation exists.

Phase 2: Checks

1. Account deletion UI element

Grep pattern "deleteAccount"|"Delete Account"|"delete_account"|"deleteUser"|"destroyAccount"|"Delete My Account"|"Remove Account" in **/*.swift. If absent → 🔴 CRITICAL. All apps with account creation must offer in-app deletion.

1. Deactivation-only pattern without true deletion

Grep pattern "deactivate"|"suspend"|"disable" in **/*.swift — check account-settings context. If "deactivate"/"suspend" found but no "deleteAccount" found → 🔴 CRITICAL. Deactivation alone does not satisfy 5.1.1(v).

1. Account deletion navigable from settings/profile

Glob **/Settings*View*, **/Profile*View*, **/Account*View* — Read each file. Verify a deletion action or navigation link to deletion is present. If account management views exist but deletion option is not surfaced → 🔴 CRITICAL.

1. Backend deletion API call

Grep pattern "deleteAccount"|"DELETE /user"|"DELETE /account"|"DELETE /me"|deleteUser in **/*.swift — check network/API layer. If in-app deletion UI exists but no corresponding backend deletion call found → 🟠 HIGH. Account deletion must also erase backend data, not only local state.

Phase 3: Output

Collect all findings from Phase 2 and build the prioritised findings list below. Include file paths and line numbers. Omit tiers with no findings.

Output Format

## Account Deletion Check — Findings

### 🔴 CRITICAL — Guaranteed rejection
- [ ] TODO: Add in-app account deletion option — "Delete Account" action required for all apps with account creation — Guideline 5.1.1(v)
- [ ] TODO: Replace "Deactivate Account" with permanent "Delete Account" — deactivation does not satisfy Apple's deletion requirement — `AccountSettingsView.swift:44` — Guideline 5.1.1(v)

### 🟠 HIGH — Very likely rejection
- [ ] TODO: Confirm backend DELETE API is called when user triggers account deletion — no network deletion call found in account management code — `AccountViewModel.swift:112` — Guideline 5.1.1(v)

### 🟡 MEDIUM — Possible rejection
- [ ] TODO: Display a confirmation dialog explaining what data will be permanently deleted before finalizing account deletion

### 🟢 LOW — Best practice
- [ ] TODO: Follow Apple's account deletion guidance — inform users of any grace period or data retention policy as per applicable laws

Tools Used

Glob, Grep, Read

Constraints

• Read-only. No file edits.
• No network calls.
• Skip Phase 1 if shared_context is provided by orchestrating agent.
• Works on Swift, Objective-C, React Native, Flutter projects.

Quick Commands

Run these in your project root to check manually:

# Check for account deletion implementation
!grep -rn "deleteAccount\|Delete Account\|delete_account\|destroyAccount\|deleteUser" . --include="*.swift"

# Check for deactivate-only (flag if no delete)
!grep -rn "deactivate\|suspend\|disable" . --include="*.swift" | grep -iv "disabled\|button\|view\|isEnabled"

# Check network layer for DELETE endpoint
!grep -rn "DELETE\|deleteAccount\|delete/user\|delete/account" . --include="*.swift" | grep -v "//"

Swift Anti-Pattern Reference

examples/swift/PrivacyPatterns.swift

Detection Steps

1. Find target files

• Glob: **/*.swift, **/*.m

1. Search for rejection patterns

• Grep createAccount\|signUp\|register\|SignUp\|CreateAccount — confirms account creation exists
• Grep deleteAccount\|delete_account\|removeAccount\|accountDeletion\|DeleteAccount — deletion implementation
• Grep deactivate\|suspend\|disable.*[Aa]ccount — deactivation-only pattern (insufficient)
• Grep ASAuthorizationAppleIDProvider\|revokeToken — Sign in with Apple token revocation

1. Determine verdict

• Account creation found + no deletion pattern → 🔴 CRITICAL (Guideline 5.1.1(v), required since June 30, 2022)
• Only deactivate/suspend found without delete → 🔴 CRITICAL (deactivation ≠ deletion)
• Sign in with Apple used + no revokeToken → 🟠 HIGH
• Deletion found + revocation present → 🟢 pass

1. Report

• File where account creation is found (line number)
• Confirm deletion is absent or only deactivation exists
• Fix: Implement Settings → Account → Delete Account with server-side data deletion and credential revocation

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: cruisediary
• Source: cruisediary/apple-app-review-skills
• License: MIT

Install and usage instructions live in the source repository linked above.