App Store RejectionGuideline 5.1.1 — Data Collection and Storage — Account Deletion

Your app was rejected because users can sign up but can't delete their account.

Since 2022, Apple requires any app that lets users create an account to also let them delete it — including all their data. You need both an in-app deletion flow and a hosted Data Deletion page.

What Apple said

“Apps that allow users to create an account must also allow them to initiate deletion of their account from within the app. Apps that offer account deletion must also include a link to a web page where users can request deletion of their account and associated personal data.”

What this actually means

Apple added this rule in 2022 and enforces it strictly. If your app has any kind of sign-up or login, you must give users a clear way to delete everything — their account, their data, all of it. This has two parts: a button inside your app, and a hosted webpage they can visit to request deletion.

What Apple needs to see

  • A dedicated webpage explaining how users can request account and data deletion
  • The page must be publicly accessible — Apple's team will visit it
  • It should list what data gets deleted and how long it takes
  • Optionally: an in-app 'Delete Account' button that links to or triggers deletion

The fix

Pass review in 60 seconds — no coding needed

BaseTerms generates and hosts all the compliance pages Apple requires. Copy your URL. Paste it into App Store Connect. Done.

  1. 1Generate your Data Deletion page on BaseTerms (takes about 60 seconds)
  2. 2Copy your unique URL — it looks like yourapp.baseterms.com/deletion
  3. 3If your app has a Settings screen, add a 'Delete Account' option that emails the user or links to this page
  4. 4In your App Review notes, paste the URL and explain the deletion process
  5. 5Resubmit your app for review
Generate my pages now — FREE

One-time payment. No subscription. No renewal fees.

Common questions

My app has Google Sign-In but no custom accounts. Does this apply?
Yes. If users authenticate with any method — Apple Sign-In, Google, email/password — and the app stores any data linked to them, this rule applies.
Does the deletion have to be instant?
No. Apple allows up to 30 days to process deletion requests. You just need to communicate that timeline clearly on the page.
What if I just remove the sign-up feature?
That works too — if your app has no accounts, this rule doesn't apply. But if any personalization or data syncing exists, you likely need accounts.