Guideline 5.1.1

Guideline 5.1.1 - Privacy: HealthKit Without Required Descriptions

High RiskMedium Difficulty0 Reports

Our Take

Your app has the HealthKit entitlement but is missing required Info.plist usage descriptions. Health data apps receive extra scrutiny during Apple review.

Resolution Guide

Add both required usage descriptions — In Info.plist, add:

`NSHealthShareUsageDescription` — why you need to READ health data. Example: "Chain reads your heart rate and workout data to show real-time stats during rides."

- `NSHealthUpdateUsageDescription` — why you need to WRITE health data. Example: "Chain saves your cycling workouts to Apple Health so they appear in your Activity rings."

Request only the data types you need — In your `HKHealthStore.requestAuthorization` call, only include the specific `HKObjectType`s your app uses. Don't request all types. Apple compares what you request against what your app actually does.

Add HealthKit to required device capabilities — If your app requires HealthKit to function, add `healthkit` to `UIRequiredDeviceCapabilities` in Info.plist. If HealthKit is optional, omit this.

Handle authorization denial gracefully — Users can deny individual health data types. Your app must work (possibly with reduced functionality) when specific types are denied. Never crash or show error dialogs.

Complete the App Privacy section — In App Store Connect, declare health data under "Health & Fitness" in the App Privacy section. Specify whether data is linked to the user's identity and what it's used for.

Prevention:

Add usage descriptions at the same time you add the HealthKit entitlement

Request the minimum set of HKObjectTypes needed

Test with all health permissions denied to verify graceful degradation

Community Solutions · 0

More Guideline 5 (Legal) rejections

View all Guideline 5 rejections

Guideline 5.1.1 - Privacy: HealthKit Without Required Descriptions

Our Take

Resolution Guide

**Add both required usage descriptions** — In Info.plist, add:

**Request only the data types you need** — In your `HKHealthStore.requestAuthorization` call, only include the specific `HKObjectType`s your app uses. Don't request all types. Apple compares what you request against what your app actually does.

**Add HealthKit to required device capabilities** — If your app requires HealthKit to function, add `healthkit` to `UIRequiredDeviceCapabilities` in Info.plist. If HealthKit is optional, omit this.

**Handle authorization denial gracefully** — Users can deny individual health data types. Your app must work (possibly with reduced functionality) when specific types are denied. Never crash or show error dialogs.

**Complete the App Privacy section** — In App Store Connect, declare health data under "Health & Fitness" in the App Privacy section. Specify whether data is linked to the user's identity and what it's used for.