Apps offering medical services, prescription drug access, or mental health support must hold required regulatory licenses and approvals, and health data collected through Apple's HealthKit framework cannot be used for advertising or sold.
This analysis describes what Apple's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision conditions App Store approval for health and medical apps on possession of applicable regulatory credentials, and prohibits monetizing HealthKit health data through advertising, providing a baseline protection for sensitive health information.
Interpretive note: The guidelines do not specify the mechanism by which Apple verifies regulatory approvals for health apps, leaving the practical scope of this compliance gate uncertain.
The updated guidelines state that developers must ensure kids receive age-appropriate experiences within their apps and must remove user-generated content that violates the guidelines, terms of service, or community standards. Under the revised policy, if Apple identifies policy-violating content, the developer will be asked to remove it and provide a compliance improvement plan. Based on the developer's response, the app may be removed from the App Store until compliance is demonstrated. This establishes a formal escalation pathway where developer inaction or inadequate remediation can result in app suspension or removal.
View change record →This new high-severity provision establishes comprehensive regulatory compliance requirements for health and medical apps, including restrictions on health data monetization and mandatory regulatory approvals.
View full change record →Consumers using health, medical, or mental health apps distributed through the App Store can rely on the guidelines' requirement that such apps hold applicable regulatory approvals and on the prohibition on using HealthKit health data for advertising; however, the depth of Apple's verification of regulatory compliance during review is not specified in the guidelines.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
to object to profiling activities based on our own legitimate interests
"Apps that provide inaccurate data or that could be used to make medical decisions should be cautious. Apps that offer prescription medication services, mental health support, or medical record management must comply with applicable laws and obtain required regulatory approvals. Apps using HealthKit must have a primary purpose of providing health and fitness services and must not use health information for advertising or selling health data.Excerpt from Apple's App Store Review Guidelines
REGULATORY LANDSCAPE: Health and medical apps may be subject to FDA oversight as software as a medical device (SaMD) under the Federal Food, Drug, and Cosmetic Act.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision conditions App Store approval for health and medical apps on possession of applicable regulatory credentials, and prohibits monetizing HealthKit health data through advertising, providing a baseline protection for sensitive health information.
Consumers using health, medical, or mental health apps distributed through the App Store can rely on the guidelines' requirement that such apps hold applicable regulatory approvals and on the prohibition on using HealthKit health data for advertising; however, the depth of Apple's verification of regulatory compliance during review is not specified in the guidelines.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Apple.