Apple privacy manifest - Required Reason

[mauroolivo]

Apple privacy manifest - Required Reason

[kingonly]

@dangeross can you please look into it?

[dangeross]

Thanks for the issue @mauroolivo, did you get notified of the use of any of theses APIs?

I've taken a look through the API list that requires reasons for use and as far as I know, none are used by the SDK itself. Any use of these APIs used by vendors/developers need to be disclosed by themselves. Also looking at the data use list, the SDK and/or Breez do not collect any personal/tracking information. Maybe there is a case for including NSPrivacyCollectedDataTypePaymentInfo but again, it is not collected for user linking/tracking but for functionality.

[mauroolivo]

Thanks @dangeross for your answer.

I've been notified by email from Apple with this "Your app’s code references one or more APIs that require reasons, including the following API categories: NSPrivacyAccessedAPICategoryDiskSpace"

To find where this is coming from I did a scan of the code and the embedded binaries with this: https://github.com/Wooder/ios_17_required_reason_api_scanner

What I got is:

Used symbols in binary ./libgdk/libs/ios_simulator_x86/libgreenaddress_full.a: fstat, fstatfs, lstat, mach_absolute_time, stat, statfs, statvfs

Probably a false positive.

[dangeross]

Do you use Blockstream Green C/C++ SDK or GreenAddress swift package?

[mauroolivo]

GreenAddress swift package