# Guideline 2.5.14 - Software Requirements: Screen Recording Without Clear User Consent

**Guideline:** 2.5.14 · **Store:** Apple App Store · **Severity:** high · **Fix difficulty:** medium · **Typical turnaround:** 2-8 hours

Canonical URL: https://appstorereject.com/rejections/apple/2/guideline-2514-software-requirements-screen-recording-without-clear-user-consent

## Description

Apple is rejecting your app because it records the user's screen, captures screenshots, or records user interactions without providing clear notice and obtaining explicit user consent before the recording begins. This guideline was significantly strengthened after high-profile incidents where analytics SDKs were found secretly recording user sessions. The guideline applies to: (1) session replay tools like FullStory, UXCam, or Smartlook that record screen interactions, (2) apps that take screenshots of user activity for analytics, (3) screen mirroring or broadcasting features that capture the display, and (4) any SDK that collects visual representations of user interactions. The key requirement is that users must see a clear, unambiguous prompt before any recording begins. The prompt must explain what is being recorded, why, and how the recording will be used. A buried mention in the privacy policy is not sufficient -- Apple requires active, visible consent at the moment recording starts.

## Common variations

- App records screen without clear user consent
- Session replay SDK captures user interactions without disclosure
- App captures screenshots of user activity without consent prompt
- No visible indication that recording is active
- Analytics SDK records user sessions without explicit opt-in

## Example rejection email

```
Guideline 2.5.14 - Performance - Software Requirements

Your app records users' screens or captures user activity without providing clear visual indication and obtaining explicit user consent before the recording begins.

Specifically, the app includes a session replay SDK that captures user interactions without a visible consent prompt.

Next Steps:
Please revise your app to:
- Provide a clear and visible disclosure to users before any screen recording or session capture begins
- Obtain explicit user consent before recording
- Display a clear visual indicator while recording is active

Apps must request explicit user consent and provide a clear visual indication when recording, logging, or otherwise making a record of user activity.
```

## Resolution steps

## Quick Assessment
- **Risk level:** High
- **Resolution path:** Fix & Resubmit
- **Typical turnaround:** 2-8 hours

## The Fix

1. **Identify all recording/capture SDKs** -- Search your project for session replay tools: FullStory, UXCam, Smartlook, LogRocket, Hotjar, Mouseflow, and similar. Check your Podfile, Package.swift, and build phases.

2. **Add explicit consent UI** -- Before any recording starts, show a clear modal dialog explaining: 'This app records your screen interactions to improve the experience. Tap Allow to enable session recording, or Decline to use the app without recording.' The recording must not begin until the user taps Allow.

3. **Add a visible recording indicator** -- While recording is active, display a persistent visual indicator (like a small red dot or banner) so users always know they're being recorded.

4. **Make recording opt-in, not opt-out** -- Recording must be disabled by default. Users must actively choose to enable it. Don't pre-check the consent toggle.

5. **Provide a way to stop recording** -- Users should be able to disable recording at any time from the app's settings.

6. **Mask sensitive data** -- Even with consent, mask password fields, credit card inputs, and other sensitive data from recordings. Most session replay SDKs have masking features.

## Prevention
- Audit all analytics SDKs for screen recording capabilities before integration
- Implement consent UI before enabling any session replay feature
- Default to recording off, with clear opt-in
- Keep a visible indicator during active recording sessions
- Review your privacy nutrition labels to ensure consistency

## Appeal guidance

If your app genuinely doesn't record screens and Apple flagged an analytics SDK that only collects interaction data (taps, not visual recordings), explain the distinction clearly. Provide documentation from the SDK showing exactly what data is collected.

## Before / after examples

**Before:** App initializes UXCam SDK in `application(_:didFinishLaunchingWithOptions:)` and begins recording all user sessions immediately without any disclosure
**After:** UXCam SDK initialization deferred until user completes onboarding. Consent dialog shown: 'Help us improve by sharing anonymous session recordings.' Recording only starts if user taps 'Allow.' Red dot indicator visible in status bar during recording. Toggle in Settings to disable.
**Why it works:** Session replay must be opt-in with clear consent, a visible indicator during recording, and an easy way to disable it.

## Common questions

**Can you appeal a 2.5.14 rejection?**

If your app genuinely doesn't record screens and Apple flagged an analytics SDK that only collects interaction data (taps, not visual recordings), explain the distinction clearly. Provide documentation from the SDK showing exactly what data is collected.

**How long does this typically take to fix?**

Typical turnaround is 2-8 hours (difficulty: medium). After resubmission, most re-reviews complete within 24-48 hours.

---
*Machine-readable source: https://api.appstorereject.com/api/rejections/detail?slug=guideline-2514-software-requirements-screen-recording-without-clear-user-consent*