appstore 审核被拒总结

持续更新

允许访问相机和相册时没有给出具体原因（2018/01/16）

5. 1.1 Legal: Privacy - Data Collection and Storage
   Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
   We noticed that your app requests the user’s consent to access their camera but does not clarify the use of this feature in the permission modal alert.
   Please see attached screenshots for details.
   Next Steps
   To resolve this issue, please revise the permission modal alert to specify why the app is requesting access to the user's camera.
   Resources
   To learn more about requesting the user’s permission to access app features, visit the iOS Human Interface Guidelines. You may also want to review the Technical Q&A QA1937: Resolving the Privacy-Sensitive Data App Rejection page for details on how to provide a usage description for permission request alerts.

这个问题的解决方案和定位的那个一样，就是给出具体的使用原因即可，重新提交等待审核。

允许定位时没有给出具体原因（2017/12/05）

Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
We noticed that your app requests the user’s consent to access the Location but does not clarify the use of this feature in the permission modal alert.
Please see attached screenshots for details.
Next Steps
To resolve this issue, please revise the permission modal alert to specify why the app is requesting access to the Location.
To learn more about requesting the user’s permission to access app features, visit the iOS Human Interface Guidelines.

这段话的大概意思就是，在允许定位的弹出框中没有写用定位去干什么，我第一次是在Info.plist中加了一条“Privacy - Location When In Use Usage Description”的配置，下面是配置：

结果又被拒了，把原因写的更详细些再次提交，终于通过了，通过时间17年12月9号

iTunes Connect中添加的截图老旧

这次审核被拒的原因是，app有较大改版，iTunes Connect中添加的截图是老版本的，不匹配所以被拒绝了。

按照新版本截图，重新提交审核通过了。在这里要提醒下如果app有不同角色，且登录后显示页面不同，要按照测试帐号的角色来截图。

2. 5 Performance: Software Requirements（2017.05.09被拒）

Guideline 2.5.2 - Performance
Your app, extension, or linked framework appears to contain code designed explicitly with the capability to change your app’s behavior or functionality after App Review approval, which is not in compliance with App Store Review Guideline 2.5.2 and section 3.3.2 of the Apple Developer Program License Agreement.This code, combined with a remote resource, can facilitate significant changes to your app’s behavior compared to when it was initially reviewed for the App Store. While you may not be using this functionality currently, it has the potential to load private frameworks, private methods, and enable future feature changes. This includes any code which passes arbitrary parameters to dynamic methods such as dlopen(), dlsym(), respondsToSelector:, performSelector:, method_exchangeImplementations(), and running remote scripts in order to change app behavior and/or call SPI, based on the contents of the downloaded script. Even if the remote resource is not intentionally malicious, it could easily be hijacked via a Man In The Middle (MiTM) attack, which can pose a serious security vulnerability to users of your app.Next StepsTo resolve this issue, please perform an in-depth review of your app and remove any code, frameworks, or SDKs that fall in line with the functionality described above and resubmit your app’s binary for review.

这次审核被拒的原因是苹果禁止热更新服务。其实我们的项目已经去除了JSPatch的相关代码也没有用到RC，苹果发警告邮件以后也上了几个版本了都没有问题，这次突然被拒，看心情完全符合苹果的审核机制。

网上查了一下大概有几种可能：高德SDK原因、个推SDK原因、项目中有JSPatch的注释。我们没有用到个推，去高德开放平台看了下确实有说SDK中有被拒的可能，就更新了高德SDK，又把Podfile中JSPatch的注释删掉了。重新提交，第二天早晨就通过了。