Apple has removed numerous apps from its App Store after it was revealed they accessed users’ private data – which is against the company’s terms and conditions.
SourceDNA revealed they found hundreds of apps in the App Store that extracted personally-identifiable user information via private APIs that Apple had forbidden.
“This is the first time we’ve seen iOS apps successfully bypass the app review process. Based on what we learned, it might not be the last,” said SourceDNA.
The company said they found these apps while adding support to Searchlight to scan for private API usage.
Apple said it has identified a group of apps that are using a third-party advertising SDK that uses private APIs to gather information.
The information gathered includes email addresses and device identifiers, and route data to its company server.
“This is a violation of our security and privacy guidelines. The apps using Youmi’s SDK will be removed from the App Store and any new apps submitted to the App Store using this SDK will be rejected,” said Apple.
“We are working closely with developers to help them get updated versions of their apps that are safe… back in the App Store quickly.”