Guideline 5.1.1
Guideline 5.1.1(ix) - Privacy: Individual Developer Submitting Regulated-Field App
Our Take
Apple is rejecting your app because it offers services in a regulated field — such as banking, lending, insurance, healthcare, cannabis, gambling, or cryptocurrency — but was submitted by an individual developer account rather than an organization account. Apple requires apps in regulated industries to be submitted by an identifiable legal entity to ensure accountability and verify licensing. This is a hard gate that cannot be resolved by changing the app. You must either (1) enroll in the Apple Developer Program as an organization, which requires a D-U-N-S number and verified legal entity, or (2) have a licensed organization publish the app on your behalf. Apple does not make exceptions for individual developers in regulated fields, regardless of whether you hold the necessary licenses personally. The D-U-N-S enrollment process typically takes 1-2 weeks, and organization account verification adds another 1-2 weeks, so plan for a 2-4 week delay. If you are a licensed professional operating as a sole proprietorship, you can still get a D-U-N-S number — it doesn't require a corporation or LLC, just a registered business entity.
Resolution Guide
**Register a legal entity** — If you don't have one, form an LLC, corporation, or register a sole proprietorship. The specific entity type varies by jurisdiction.
**Get a D-U-N-S number** — Apply at dnb.com or through Apple's D-U-N-S lookup tool. Free applications take 5-7 business days; expedited costs ~$229.
**Enroll as an organization** — Once you have a D-U-N-S number, enroll in the Apple Developer Program as an organization. This requires identity verification and may take 1-2 weeks.
**Transfer the app** — If the app is already live under your individual account, use App Store Connect's app transfer feature. If not yet published, simply submit under the new organization account.
**Ensure regulatory compliance** — While setting up the organization account, also verify your app meets the specific regulatory requirements for your field (licenses, disclosures, compliance documentation).
Prevention
Example Rejection Email
Before & After
Cryptocurrency portfolio tracker submitted under 'John Smith' individual developer account
App resubmitted under 'Smith Financial Technologies LLC' organization account with D-U-N-S number verified
What changed: Regulated-field apps must come from an identifiable organization. Individual accounts are not accepted regardless of the app's quality or the developer's credentials.
Community Solutions · 0
Sign in to share your solution.
More Guideline 5 (Legal) rejections
- Guideline 5 - Legal: Remove Watermark Feature
- Guideline 5.1.1 - Data Collection and Storage: Incomplete Privacy Manifest
- Guideline 5.1.1 - Data Collection and Storage: Missing Purpose Strings
- Guideline 5.1.1 - Data Collection and Storage: Privacy Manifest Missing
- Guideline 5.1.1 - Data Collection and Storage: Privacy Nutrition Label Mismatch
- Guideline 5.1.1 - Data Collection and Storage: Privacy Policy