Guideline 5.1.1(v): the app supports account creation but does not include an option to initiate account deletion
The rejection reads:
Guideline 5.1.1(v) - Data Collection and Storage
The app supports account creation but does not include an option to initiate account deletion. Apps that support account creation must also offer account deletion to give users more control of the data they've shared while using an app.What Apple asks for. If people can create an account in your app, they must be able to start deleting it from inside the app. Deactivating or disabling the account is not enough. If deletion has to finish on a website, the app must link directly to that page. A confirmation step is fine.
Google Play asks for the same, plus a web link. Apps that let users create an account must offer an in-app path to delete it and its data, and a web page where deletion can be requested, declared in the Data safety form in Play Console.
How to fix it. Add "Delete account" to the account or settings screen. It should delete the account and its data on your server (or start that request), sign the user out, and say what happens. With Firebase that is deleteUser (the user may need to sign in again first); with Supabase it is a server-side call with the service role key, never from the app. Publish the same flow as a web page for Google Play.
How common it is. In our scan of 653 open-source React Native apps, 43 sign users up (Firebase, Supabase, Amplify, Appwrite, Clerk or their own /signup API) with no account deletion anywhere in the code. npx nativekeel flags it before you submit.
npx nativekeel