cocoapods-privacy-manifests

CocoaPods - Privacy Manifests

Safety Notice

This listing is imported from skills.sh public index metadata. Review upstream SKILL.md and repository scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "cocoapods-privacy-manifests" with this command: npx skills add thebushidocollective/han/thebushidocollective-han-cocoapods-privacy-manifests

CocoaPods - Privacy Manifests

Implement iOS 17+ privacy manifests for App Store compliance and user transparency.

What Are Privacy Manifests?

Privacy manifests (PrivacyInfo.xcprivacy ) are XML property list files that declare:

  • Data collection and usage practices

  • Required Reasons API usage

  • Tracking domains

  • Privacy-sensitive APIs

Why Privacy Manifests?

Starting with iOS 17 and Xcode 15, Apple requires privacy manifests for:

  • Apps using privacy-sensitive APIs

  • Third-party SDKs and frameworks

  • Any code accessing user data

Privacy Manifest File Format

Basic Structure

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>NSPrivacyTracking</key> <false/> <key>NSPrivacyTrackingDomains</key> <array/> <key>NSPrivacyCollectedDataTypes</key> <array/> <key>NSPrivacyAccessedAPITypes</key> <array/> </dict> </plist>

Including in Podspec

Resource Bundle (Recommended)

Pod::Spec.new do |spec| spec.name = 'MyLibrary' spec.version = '1.0.0'

spec.source_files = 'Source/**/*.swift'

Include privacy manifest in resource bundle

spec.resource_bundles = { 'MyLibrary' => [ 'Resources//*.xcprivacy', 'Resources//*.{png,jpg,xcassets}' ] } end

Direct Resources (Alternative)

spec.resources = 'Resources/PrivacyInfo.xcprivacy'

Or with glob pattern

spec.resources = 'Resources/**/*.xcprivacy'

File Location

MyLibrary/ ├── MyLibrary.podspec ├── Source/ │ └── MyLibrary/ └── Resources/ ├── PrivacyInfo.xcprivacy # Privacy manifest └── Assets.xcassets

Required Reasons APIs

Common APIs Requiring Reasons

Apple requires declarations for these privacy-sensitive APIs:

File Timestamp APIs

<key>NSPrivacyAccessedAPITypes</key> <array> <dict> <key>NSPrivacyAccessedAPIType</key> <string>NSPrivacyAccessedAPICategoryFileTimestamp</string> <key>NSPrivacyAccessedAPITypeReasons</key> <array> <string>C617.1</string> </array> </dict> </array>

Reason Codes:

  • C617.1 : Display timestamps to user

  • 0A2A.1 : Access timestamps of files in app container

  • 3B52.1 : Access timestamps for app functionality

  • DDA9.1 : Timestamp access for debugging

User Defaults APIs

<dict> <key>NSPrivacyAccessedAPIType</key> <string>NSPrivacyAccessedAPICategoryUserDefaults</string> <key>NSPrivacyAccessedAPITypeReasons</key> <array> <string>CA92.1</string> </array> </dict>

Reason Codes:

  • CA92.1 : Access user defaults in same app group

  • 1C8F.1 : Access user defaults for app functionality

  • C56D.1 : SDK-specific configuration preferences

  • AC6B.1 : Third-party SDK functionality

System Boot Time APIs

<dict> <key>NSPrivacyAccessedAPIType</key> <string>NSPrivacyAccessedAPICategorySystemBootTime</string> <key>NSPrivacyAccessedAPITypeReasons</key> <array> <string>35F9.1</string> </array> </dict>

Reason Codes:

  • 35F9.1 : Measure time elapsed for app functionality

  • 8FFB.1 : Calculate absolute timestamp

  • 3D61.1 : Measure time for performance testing

Disk Space APIs

<dict> <key>NSPrivacyAccessedAPIType</key> <string>NSPrivacyAccessedAPICategoryDiskSpace</string> <key>NSPrivacyAccessedAPITypeReasons</key> <array> <string>85F4.1</string> </array> </dict>

Reason Codes:

  • 85F4.1 : Display disk space to user

  • E174.1 : Check disk space before file operations

  • 7D9E.1 : Health/fitness app disk space

  • B728.1 : User-initiated file management

Data Collection

Declaring Collected Data

<key>NSPrivacyCollectedDataTypes</key> <array> <dict> <key>NSPrivacyCollectedDataType</key> <string>NSPrivacyCollectedDataTypeEmailAddress</string> <key>NSPrivacyCollectedDataTypeLinked</key> <true/> <key>NSPrivacyCollectedDataTypeTracking</key> <false/> <key>NSPrivacyCollectedDataTypePurposes</key> <array> <string>NSPrivacyCollectedDataTypePurposeAppFunctionality</string> </array> </dict> </array>

Common Data Types

  • NSPrivacyCollectedDataTypeEmailAddress

  • NSPrivacyCollectedDataTypeName

  • NSPrivacyCollectedDataTypePhoneNumber

  • NSPrivacyCollectedDataTypeDeviceID

  • NSPrivacyCollectedDataTypeUserID

  • NSPrivacyCollectedDataTypePreciseLocation

  • NSPrivacyCollectedDataTypeCoarseLocation

  • NSPrivacyCollectedDataTypeSearchHistory

  • NSPrivacyCollectedDataTypeBrowsingHistory

Collection Purposes

  • NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising

  • NSPrivacyCollectedDataTypePurposeAppFunctionality

  • NSPrivacyCollectedDataTypePurposeAnalytics

  • NSPrivacyCollectedDataTypePurposeProductPersonalization

  • NSPrivacyCollectedDataTypePurposeOther

Tracking Configuration

No Tracking

<key>NSPrivacyTracking</key> <false/> <key>NSPrivacyTrackingDomains</key> <array/>

With Tracking

<key>NSPrivacyTracking</key> <true/> <key>NSPrivacyTrackingDomains</key> <array> <string>analytics.example.com</string> <string>tracking.example.com</string> </array>

Complete Example

Networking SDK Privacy Manifest

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <!-- No tracking --> <key>NSPrivacyTracking</key> <false/> <key>NSPrivacyTrackingDomains</key> <array/>

&#x3C;!-- Data collection -->
&#x3C;key>NSPrivacyCollectedDataTypes&#x3C;/key>
&#x3C;array>
    &#x3C;dict>
        &#x3C;key>NSPrivacyCollectedDataType&#x3C;/key>
        &#x3C;string>NSPrivacyCollectedDataTypeUserID&#x3C;/string>
        &#x3C;key>NSPrivacyCollectedDataTypeLinked&#x3C;/key>
        &#x3C;true/>
        &#x3C;key>NSPrivacyCollectedDataTypeTracking&#x3C;/key>
        &#x3C;false/>
        &#x3C;key>NSPrivacyCollectedDataTypePurposes&#x3C;/key>
        &#x3C;array>
            &#x3C;string>NSPrivacyCollectedDataTypePurposeAppFunctionality&#x3C;/string>
        &#x3C;/array>
    &#x3C;/dict>
&#x3C;/array>

&#x3C;!-- Required Reasons APIs -->
&#x3C;key>NSPrivacyAccessedAPITypes&#x3C;/key>
&#x3C;array>
    &#x3C;!-- User Defaults for caching -->
    &#x3C;dict>
        &#x3C;key>NSPrivacyAccessedAPIType&#x3C;/key>
        &#x3C;string>NSPrivacyAccessedAPICategoryUserDefaults&#x3C;/string>
        &#x3C;key>NSPrivacyAccessedAPITypeReasons&#x3C;/key>
        &#x3C;array>
            &#x3C;string>CA92.1&#x3C;/string>
        &#x3C;/array>
    &#x3C;/dict>

    &#x3C;!-- File timestamps for cache validation -->
    &#x3C;dict>
        &#x3C;key>NSPrivacyAccessedAPIType&#x3C;/key>
        &#x3C;string>NSPrivacyAccessedAPICategoryFileTimestamp&#x3C;/string>
        &#x3C;key>NSPrivacyAccessedAPITypeReasons&#x3C;/key>
        &#x3C;array>
            &#x3C;string>3B52.1&#x3C;/string>
        &#x3C;/array>
    &#x3C;/dict>
&#x3C;/array>

</dict> </plist>

Analytics SDK Privacy Manifest

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <!-- Tracking enabled --> <key>NSPrivacyTracking</key> <true/> <key>NSPrivacyTrackingDomains</key> <array> <string>analytics.myservice.com</string> </array>

&#x3C;!-- Data collection -->
&#x3C;key>NSPrivacyCollectedDataTypes&#x3C;/key>
&#x3C;array>
    &#x3C;dict>
        &#x3C;key>NSPrivacyCollectedDataType&#x3C;/key>
        &#x3C;string>NSPrivacyCollectedDataTypeDeviceID&#x3C;/string>
        &#x3C;key>NSPrivacyCollectedDataTypeLinked&#x3C;/key>
        &#x3C;true/>
        &#x3C;key>NSPrivacyCollectedDataTypeTracking&#x3C;/key>
        &#x3C;true/>
        &#x3C;key>NSPrivacyCollectedDataTypePurposes&#x3C;/key>
        &#x3C;array>
            &#x3C;string>NSPrivacyCollectedDataTypePurposeAnalytics&#x3C;/string>
        &#x3C;/array>
    &#x3C;/dict>
&#x3C;/array>

&#x3C;!-- Required Reasons APIs -->
&#x3C;key>NSPrivacyAccessedAPITypes&#x3C;/key>
&#x3C;array>
    &#x3C;dict>
        &#x3C;key>NSPrivacyAccessedAPIType&#x3C;/key>
        &#x3C;string>NSPrivacyAccessedAPICategorySystemBootTime&#x3C;/string>
        &#x3C;key>NSPrivacyAccessedAPITypeReasons&#x3C;/key>
        &#x3C;array>
            &#x3C;string>35F9.1&#x3C;/string>
        &#x3C;/array>
    &#x3C;/dict>
&#x3C;/array>

</dict> </plist>

CocoaPods Integration

Podspec Configuration

Pod::Spec.new do |spec| spec.name = 'MyAnalyticsSDK' spec.version = '1.0.0'

spec.ios.deployment_target = '13.0'

spec.source_files = 'Source/**/*.swift'

Include privacy manifest

spec.resource_bundles = { 'MyAnalyticsSDK' => [ 'Resources/PrivacyInfo.xcprivacy' ] }

Platform-specific privacy manifests

spec.ios.resource_bundles = { 'MyAnalyticsSDK_iOS' => ['Resources/iOS/PrivacyInfo.xcprivacy'] }

spec.osx.resource_bundles = { 'MyAnalyticsSDK_macOS' => ['Resources/macOS/PrivacyInfo.xcprivacy'] } end

Validation

Check Privacy Manifest

Lint with privacy manifest

pod lib lint

Validate privacy manifest is included

pod lib lint --verbose | grep -i privacy

Xcode Validation

  • Build your library in Xcode

  • Open Report Navigator

  • Check for privacy warnings

  • Verify privacy manifest in bundle

App Store Validation

Generate .xcarchive

xcodebuild archive -workspace MyApp.xcworkspace -scheme MyApp

Validate before submission

xcodebuild -exportArchive -archivePath MyApp.xcarchive -exportPath MyApp.ipa -exportOptionsPlist ExportOptions.plist

Best Practices

Minimal Disclosure

<!-- Only declare what you actually use --> <key>NSPrivacyCollectedDataTypes</key> <array> <!-- Only include if you actually collect this data --> </array>

Accurate Reasons

<!-- Use correct reason codes --> <key>NSPrivacyAccessedAPITypeReasons</key> <array> <string>CA92.1</string> <!-- Must match actual usage --> </array>

Regular Updates

Update privacy manifest when adding new APIs

spec.version = '1.1.0' # Bump version

Update PrivacyInfo.xcprivacy with new declarations

Anti-Patterns

Don't

❌ Omit privacy manifest for iOS 17+ apps

Missing privacy manifest - App Store rejection risk

spec.resource_bundles = { 'MyLibrary' => ['Resources/**/*.png']

No PrivacyInfo.xcprivacy

}

❌ Use incorrect reason codes

<string>WRONG.1</string> <!-- Invalid code -->

❌ Declare tracking without domains

<key>NSPrivacyTracking</key> <true/> <key>NSPrivacyTrackingDomains</key> <array/> <!-- Empty - inconsistent -->

Do

✅ Include privacy manifest for all iOS SDKs

spec.resource_bundles = { 'MyLibrary' => ['Resources/PrivacyInfo.xcprivacy'] }

✅ Use accurate reason codes

<string>CA92.1</string> <!-- Valid, matches usage -->

✅ Be truthful about tracking

<key>NSPrivacyTracking</key> <true/> <key>NSPrivacyTrackingDomains</key> <array> <string>analytics.example.com</string> </array>

Resources

  • Apple Privacy Manifest Documentation

  • Required Reasons API Reference

  • App Privacy Details

Related Skills

  • cocoapods-podspec-fundamentals

  • cocoapods-subspecs-organization

  • cocoapods-publishing-workflow

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Open in GitHubOpen in ClawHub

Related Skills

Related by shared tags or category signals.

General

android-jetpack-compose

No summary provided by upstream source.

Repository SourceNeeds Review
468-thebushidocollective
General

fastapi-async-patterns

No summary provided by upstream source.

Repository SourceNeeds Review
417-thebushidocollective
General

storybook-story-writing

No summary provided by upstream source.

Repository SourceNeeds Review
281-thebushidocollective
General

atomic-design-fundamentals

No summary provided by upstream source.

Repository SourceNeeds Review
179-thebushidocollective