App Store 5.1.3 rejection: Health data and research

Health permissions can be configured correctly while the data is still used in a prohibited way. Apple’s 5.1.3 adds restrictions on health-data use, storage, accuracy, and research consent.

5.1.3(i): permitted use and disclosure

Explain the specific health data collected. Keep it out of advertising, marketing, and unrelated behavior analysis. Health-management or research uses need the required permission. A direct benefit to the user, such as an insurance discount, has conditions: the provider of that benefit submits the app and the data isn’t shared with a third party.

5.1.3(ii): accuracy and storage

Avoid writing false or inaccurate data to HealthKit or other health systems, and keep personal health information out of iCloud. We’d inspect synchronization and backups as well as explicit storage code.

5.1.3(iii): research consent

Obtain participant consent, or a parent/guardian’s consent for minors. Explain the research purpose and duration, procedures, risks and benefits, confidentiality and sharing, contact route, and withdrawal process.

5.1.3(iv): ethics approval

Human-subject health research needs independent ethics-board approval, with evidence available to Apple on request. A consent form doesn’t substitute for that approval.

Verify with safe data

Have qualified people review the research and health aspects. Use fictional test records to inspect permissions, writes, storage, sharing, and withdrawal. Give Apple the corrected flow and relevant approval evidence without exposing participants’ information.