ai-data-disclosure

Scan your Swift codebase for third-party AI SDK usage (OpenAI, Gemini, Anthropic) and verify an explicit in-app consent disclosure exists before any user data is transmitted. This Skill automates that grep-based audit and reports violations by severity.

Apple requires an explicit in-app notice naming the AI provider and an affirmative opt-in consent before any user content is transmitted. A generic privacy policy clause about third-party service providers is insufficient.

No. On-device ML using Core ML, Create ML, Vision, or NaturalLanguage frameworks does not trigger Guideline 5.1.2(i). Only external API calls to third-party AI services require explicit disclosure and consent.

Sending sensitive data categories like health, location, or contacts to an external AI service requires heightened disclosure and explicit opt-in. Even if transcription happens on-device first, forwarding content to a third-party LLM triggers the requirement.

No. The privacy policy must specifically name the AI services receiving data, but Apple also requires an in-app disclosure presented before AI processing occurs. Both the policy update and the consent UI are needed.