Provision record
Apple · Apple App Store Review Guidelines · View original document ↗

Facial recognition authentication must use LocalAuthentication

Common · 102 of 343 platforms
Stay ahead of the changes
Track Apple and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Apple's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Oct 17, 2026

The updated guidelines do not directly affect end users of apps, but they establish new requirements for developers submitting apps to the App Store. Developers must now provide regulatory documentation for apps requiring approval, implement content moderation safeguards for user-generated content and AI content creation platforms, and ensure all app information and creative assets meet specific accuracy and appropriateness standards. Developers who fail to implement safeguards or remediate violations after notice may be considered in violation of the Developer Code of Conduct, potentially resulting in app removal or account termination.

View change record →

How other platforms handle this

Smartsheet

Any application programming interface, model context protocol, or other similar interface provided or controlled by Smartsheet and made available for use with an Online Service...is subject to the applicable restrictions and limitations specified in an Order, Documentation, and Smartsheet's Policies...

Ramp

Company agrees that use of a developer account, including to access APIs to create automations or integrate the Services with Third-Party Services, is governed by the API Agreement.

Cohere

At Cohere's request, Customer will provide Cohere access to, and use of, Customer Application, at no cost to Cohere, for the purpose of monitoring or reviewing Customer Application for compliance with this Agreement.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Apps using facial recognition for account authentication must use LocalAuthentication (and not ARKit or other facial recognition technology) where possible...

Excerpt from Apple's App Store Review Guidelines

Provision details

Document information
Document
Apple App Store Review Guidelines
Entity
Apple
Date stated by the document
Oct. 16, 2026
As printed in Apple’s text (version CA-V-007653), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
March 6, 2026
Text quoted from version
CA-V-003543, captured June 9, 2026
Record ID
CA-P-018881
Document ID
CA-D-000025
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-003543)
d6f788d9cb5c7f40c825f7140b5817478fa8dc9f189b720069a20e53c60a29df
Analysis generated
July 9, 2026 03:44 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-003543, captured June 9, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007653, captured Oct. 17, 2026; this clause has not been re-checked against it.
Citation Record
Entity: Apple
Document: Apple App Store Review Guidelines
Record ID: CA-P-018881
Version: CA-V-003543
Captured: 2026-06-09 00:07:29 UTC
SHA-256: d6f788d9cb5c7f40…
URL: https://conductatlas.com/platform/apple/apple-app-store-review-guidelines/provision/CA-P-018881/facial-recognition-authentication-must-use-localauthentication/
Accessed: Nov. 1, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Apple's Facial recognition authentication must use LocalAuthentication clause do?

The clause states: “Apps using facial recognition for account authentication must use LocalAuthentication (and not ARKit or other facial recognition technology) where possible...”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 102 platforms. See the full comparison.

Is ConductAtlas affiliated with Apple?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Apple.