Guideline 5.1.3
Guideline 5.1.3 - Privacy: Health Research App Without Informed Consent
Our Take
Apple is rejecting your app because it conducts health-related human subject research without obtaining proper informed consent from participants or without evidence of ethics board (IRB/ERB) approval. Apps that use HealthKit, CareKit, or ResearchKit to collect health data for research purposes must comply with applicable laws and institutional guidelines, including obtaining informed consent. This rejection covers two main scenarios: (1) the app collects health data for research but does not include a proper informed consent flow — a screen that explains the study, risks, benefits, data usage, and allows the participant to agree or decline, or (2) the app conducts research that requires ethics board oversight but cannot demonstrate that approval was obtained. Apple takes this seriously because health research with human subjects is heavily regulated worldwide. The informed consent must be embedded in the app (not just a website link), must be understandable to a layperson, and must be completable before any data collection begins. If your app uses ResearchKit, the framework includes built-in informed consent components that satisfy Apple's requirements.
Resolution Guide
**Implement informed consent** — Use ResearchKit's ORKConsentDocument and ORKVisualConsentStep to build a compliant consent flow. It must cover: study purpose, procedures, time commitment, risks, benefits, data handling, confidentiality, and the right to withdraw.
**Make consent mandatory before data collection** — No health data collection or study participation can begin until the user completes the consent flow and affirmatively agrees.
**Include withdrawal mechanism** — Add a clear way for participants to withdraw from the study at any time (e.g., a 'Leave Study' button in settings) and stop all data collection when they do.
**Obtain IRB/ERB approval** — If your research involves human subjects, obtain ethics board approval. This is typically required by law, not just Apple policy.
**Document approval in review notes** — Upload the IRB approval letter and protocol number in the App Review Notes. Include the approving institution's name and approval date.
Prevention
Example Rejection Email
Consider Appealing
Appeal if IRB approval exists and was not submitted with the review. Provide the IRB approval letter and protocol number in the review notes. If the consent flow exists but was missed by the reviewer, provide step-by-step instructions to reach it.
Before & After
App collects heart rate and sleep data for a university study with only a checkbox saying 'I agree to participate'
App includes a full ResearchKit consent flow with visual slides explaining the study, a PDF consent document for review, a signature step, and a 'Leave Study' button in settings; IRB approval letter attached to review notes
What changed: A single checkbox is not informed consent. Apple expects a comprehensive, multi-step process that mirrors clinical research standards.
Community Solutions · 0
Sign in to share your solution.
More Guideline 5 (Legal) rejections
- Guideline 5 - Legal: Remove Watermark Feature
- Guideline 5.1.1 - Data Collection and Storage: Incomplete Privacy Manifest
- Guideline 5.1.1 - Data Collection and Storage: Missing Purpose Strings
- Guideline 5.1.1 - Data Collection and Storage: Privacy Manifest Missing
- Guideline 5.1.1 - Data Collection and Storage: Privacy Nutrition Label Mismatch
- Guideline 5.1.1 - Data Collection and Storage: Privacy Policy