Apple Strengthens Data Privacy Rules for Third-Party AI Integration in App Store

Apple's new App Review Guidelines clamp down on apps sharing personal data with 'third-party AI' | TechCrunch

Apple on Thursday introduced a new set of App Review Guidelines for developers, which now specifically state that apps must disclose and obtain users' permission before sharing personal data with third-party AI. At the same time, Apple is ensuring other apps aren't leaking personal data to AI providers or other AI businesses. What's interesting about this particular update is not the requirements being described but that Apple has specifically called out AI companies as needing to come into compliance. Before the revised language, the guideline known as rule 5.1.2(i) included language around disclosure and obtaining user consent for data sharing, noting that apps could not "use, transmit or share" someone's personal data without their permission. This rule served as part of Apple's compliance with data privacy regulations like the EU's GDPR (General Data Protection Regulation), California's Consumer Privacy Act, and others, which ensure that users have more control over how their data is collected and shared. Apps that don't follow the policy can be removed from the App Store. The newly revised guideline adds the following sentence (emphasis ours): You must clearly disclose where personal data will be shared with third parties, including with third-party AI, and obtain explicit permission before doing so. This change could impact apps that intend to use AI systems to collect or process information about their users, perhaps to personalize their apps or provide certain functionality. It's unclear how stringently Apple will enforce the rule, given that the term "AI" could include a variety of technologies -- not just LLMs, but also things like machine learning. The updated rule is one of several revisions to the App Review Guidelines out on Thursday. Other changes are focused on supporting Apple's new Mini Apps Program, also announced today, as well as tweaks to rules involving creator apps, loan apps, and more. One addition also added crypto exchanges to the list of apps that provide services in highly regulated fields.

Apple's New App Store Rules Take Aim at Personal Data Sharing With AI

Blake has over a decade of experience writing for the web, with a focus on mobile phones, where he covered the smartphone boom of the 2010s and the broader tech scene. When he's not in front of a keyboard, you'll most likely find him playing video games, watching horror flicks, or hunting down a good churro. Apple updated its App Review Guidelines page on Thursday, introducing changes to the handling of personal data sharing and the requirements that must be met before doing so. Noncompliant apps could be removed from the App Store. The updated language in the rules calls out that personal data shared with third parties must be both clearly disclosed and only with the explicit permission of the user. The language echoes previous guidelines, but points out that these third parties also include artificial intelligence: "You must clearly disclose where personal data will be shared with third parties, including with third-party AI, and obtain explicit permission before doing so. Data collected from apps may only be shared with third parties to improve the app or serve advertising (in compliance with the Apple Developer Program License Agreement)," it says. Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source. Apple didn't immediately respond to a request for comment. The small change is a win in a world where privacy often feels more like a concept than a reality, especially as AI technology continues to surge.

Apple is tightening the rules on apps that share your data with AI

This new policy specifically adds "third-party AI" to the list of entities for which apps must disclose data sharing a change from the previous, more general rule. Apple implemented new App Review Guidelines for developers Thursday, mandating apps disclose and obtain user permission before sharing personal data with third-party AI. This policy change precedes Apple's planned introduction of an AI-upgraded Siri in 2026. The updated Siri will enable users to perform cross-app actions via commands, partially powered by Google's Gemini technology, as reported by Bloomberg. Apple aims to prevent other applications from transmitting personal data to AI providers or related businesses. The specificity of this update lies in its direct mention of AI companies for compliance. Previously, guideline 5.1.2(i) required disclosure and user consent for data sharing, prohibiting apps from using, transmitting, or sharing personal data without permission. This rule addressed data privacy regulations, including the EU's GDPR and California's Consumer Privacy Act. Non-compliant apps risk removal from the App Store. The revised guideline now includes: "You must clearly disclose where personal data will be shared with third parties, including with third-party AI, and obtain explicit permission before doing so." This revision may affect applications leveraging AI systems to collect or process user information for personalization or specific functionalities. The rigor of Apple's enforcement remains to be seen, particularly as "AI" encompasses various technologies beyond large language models, such as machine learning. Other revisions to the App Review Guidelines, also announced Thursday, support Apple's new Mini Apps Program. Further adjustments involve rules for creator apps, loan apps, and other categories.

Apple Tightens App Rules: Mandatory User Consent for Third-Party AI Data

Apple has updated its App Store Review Guidelines to require developers to notify users directly. They also have to obtain the user's consent before sharing personal data with third-party AI services. The updated rule, which was revised on November 13, 2025, arrives just months ahead of Apple's bold ambitions to introduce a more advanced, AI-powered Siri in 2026. The timing is fitting. According to a report by Bloomberg, the new Siri will execute specific tasks within using simple voice commands. As previously rumored, Google's Gemini AI will partly power this new functionality, providing Apple with an even more integrated form of external AI models. The iPhone maker aims to gain more control over how other apps handle user data, particularly regarding the transfer of data to external AI companies for processing without users fully understanding the implications.