att-framework-audit

Any app integrating analytics, attribution, or advertising SDKs like Firebase, AppsFlyer, or Adjust that performs cross-app or cross-site tracking must show the ATT prompt. This audit greps your Swift sources and dependency manifests to detect such SDKs and flags missing consent flows.

Import AppTrackingTransparency, call ATTrackingManager.requestTrackingAuthorization before any data collection, and add NSUserTrackingUsageDescription to Info.plist. The purpose string should clearly explain what data is tracked and why, not a generic short message.

Yes, the audit supports Swift, Objective-C, React Native, and Flutter projects. It scans source files, dependency manifests like Podfile and Package.swift, and Info.plist regardless of the framework wrapping the native layer.

This happens when the prior production binary's tracking metadata conflicts with the updated build, leaving the ATTrackingManager authorization state inconsistent. Test ATT behavior both on fresh installs and on updates from the live App Store binary before submission.

The audit is read-only and performs static analysis only; it cannot verify runtime behavior such as whether requestTrackingAuthorization actually executes before analytics events fire. You must still verify initialization order in AppDelegate manually.