Skip to content
Get a quote

App Store rejectionGuideline 4.8 - Design - Login Services

Your app lets people sign in with Google, Facebook or another social account, and App Review sent it back under 4.8. The rule asks for one more sign-in option with specific privacy features. Here’s what it says, when it doesn’t apply, and how to fix it at a fixed price.

Short answer

If the main account in your app is set up through a third-party or social login, Apple requires an equivalent option from another login service that limits data to name and email, lets people keep their email private, and doesn’t collect app activity for ads without consent. The guideline names no service; it lists the features. Apps that only use their own email and password sign-in don’t need it.

What 4.8 asks for, and the fix

  1. 01

    Social login with no equivalent option

    “must also offer as an equivalent option another login service with the following features:” Apple, Guideline 4.8

    Google, Facebook, X or LinkedIn sign-in for the main account triggers 4.8. Add another sign-in option that has the three features below, and show it as a real sign-in choice on the same screen.

  2. 02

    The other option doesn’t have the three features

    “the login service allows users to keep their email address private as part of setting up their account; and” Apple, Guideline 4.8

    The second option has to limit data to the user’s name and email address, let people keep their email address private when they sign up, and not collect their activity in your app for advertising without consent. Check the option you add against all three.

  3. 03

    When you don’t need another option

    “Your app exclusively uses your company’s own account setup and sign-in systems.” Apple, Guideline 4.8

    Apple lists exceptions, including apps that only use your company’s own account and sign-in system, and education, enterprise or business apps that require an existing school or work account. Apple lists others too, such as government ID systems. If one applies, say which one in your reply to App Review.

Checked against the vendor’s docs on : Apple: App Review Guidelines, 4.8 Login Services (last updated October 16, 2026); Apple: App Review (replying and appeals).

Rather hand it over?

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.

Resubmit before Apple’s holiday slowdown

Pay for the Diagnosis and send the rejection and access to the app by (US Eastern). The Diagnosis is back by . Pay for the Fix that day and it arrives as a pull request by , in time to build and resubmit before .

In past years Apple said reviews may take longer around the holidays: December 20 to 26 in 2024 (opens in a new tab), December 22 to 27 in 2023 (opens in a new tab), December 23 to 27 in 2022 (opens in a new tab). Apple hasn’t posted its 2026 dates yet (checked ). Approval stays Apple’s decision.

Related: App Store Guideline 2.1 · App Store Guideline 5.1.1 · Supabase auth email links go to localhost

Questions

More on this rejection

Should I reply to App Review or appeal?

Reply first. Apple says you can correspond with App Review in App Store Connect to resolve the issues before resubmitting, which is the place for a demo account, a screen recording or an explanation. Appeal to the App Review Board only if you believe App Review misunderstood the app or treated you unfairly. Apple allows one appeal per rejected submission and asks for specific reasons the app complies.

Does the guideline require Sign in with Apple?

The current text doesn’t name a service. It asks for another login option with three features: name and email only, a way to keep the email private, and no ad tracking of app activity without consent.

Does email and password sign-in count?

If your app only uses your own account setup and sign-in, Apple lists that as an exception, so no other option is needed. The rule applies when a third-party or social login sets up or signs in to the main account, so connecting Google only to read a calendar, for example, isn’t the same thing.

Can you fix it for me?

Yes, through the App Fix Ticket: you send the rejection message and access to the app, Simon writes a diagnosis of what App Review hit and how to fix it, then fixes the code so you can resubmit. Each step has a fixed price, paid upfront. Approval stays Apple’s decision; the ticket covers the fix.

A different error?

Describe it and get a written quote

Send the error and what you were doing. You get a written scope, a fixed price and a timeline; we reply by email, usually within one business day.

Describe your problem All fixes