Apple has formally introduced new guidelines governing how app developers share user data with third-party artificial intelligence services. The updated App Review Guidelines, revised last week, mark a significant step by the tech giant. They aim to increase transparency and user control over personal information.
This update represents the first time Apple has explicitly included the term “AI” in its official guidelines. The change signals a broader institutional acceptance of the technology while simultaneously addressing critical privacy concerns.
The revised rules, located in the “Data Use and Sharing” section (5.1.2), now require developers to provide clear disclosures. Also, developers must obtain explicit user permission. The guideline states, “You must clearly disclose where personal data will be shared with third parties, including with third-party AI, and obtain explicit permission before doing so.”
Apple Updates App Review Guidelines to Tighten AI Data Sharing https://t.co/SLM03kirFk #technology #technews pic.twitter.com/UjCNp8QwYF
— TechRepublic (@TechRepublic) November 17, 2025This policy directly tackles the industry-wide practice of AI models training on user data without clear consent. App developers must now transparently disclose:
- How will they use a user’s conversational data and personal information?
- Which third-party AI models will receive this data?
- The purpose of the data sharing is limited to improving the app or serving ads.
Apple reinforces these rules with strict consequences for non-compliance. The company warns that apps failing to adhere to these guidelines may be removed from sale. Additionally, violation of regional data privacy laws may result in your removal from the Apple Developer Program.
Read: Apple to Power Siri Revamp with Google’s AI in $1 Billion Deal
This proactive move provides users with greater assurance. It ensures that AI-powered apps on the App Store cannot secretly collect user data. Moreover, they cannot use personal information to train large language models without obtaining explicit, informed permission first.
