Sunday, May 31, 2026

Oregon State Credit Union app for iOS: App Features Broken Privacy Policy Links in the Apple App Store

 Date: May 31, 2026

App Version Affected: 2026.01

App Store Link: Oregon State Credit Union on Apple App Store

Description

When financial institutions handle user data, transparency is everything. However, the "developer’s privacy policy" and "privacy policy" links on the Oregon State Credit Union’s Apple App Store detail page are currently broken. Instead of taking users to a valid legal document, they point to a dead end.

Clicking either link directs users to an error page on the credit union's website stating: “We’re sorry we couldn’t find that page.”

Steps to Reproduce

  1. Open the Apple App Store and navigate to the detail page for the Oregon State Credit Union app.

  2. Scroll down to the App Privacy section. (As seen in IMG_2543.jpg, which highlights the "developer's privacy policy" link).

  3. Select either the “developer’s privacy policy” or “privacy policy” link.

  4. Observe the destination browser window.

Expected vs. Actual Result

  • Expected Result: The links must direct the user to a valid, fully readable privacy policy detailing how the credit union handles sensitive user data.

  • Actual Result: The links load a 404 Not Found style landing page on oregonstatecu.com. As shown in IMG_2544.jpg, the page explicitly reads: "We're sorry, we couldn't find the page."

Apple App Store detail page for the Oregon State Credit Union app for iOS.





Select either the "Privacy Policy" or "Developer's Privacy Policy" links...


User is taken to a "We're sorry we couldn't find the page." error page instead a valid privacy policy. 




Tuesday, May 26, 2026

Goodwill Delivery app for iOS: "Settings" option after declining camera access does not take user out of the app

iOS 26.3.1

Goodwill Delivery app for iOS (version 2.0.10)

05/26/2026

Description:

In the country of Georgia, the grocery chain "Goodwill" offers an iOS app called Goodwill Delivery. Like most shopping apps, it includes a barcode scanner that requires camera access.


Goodwill Delivery app barcode scanner

The option to activate the camera from inside the Goodwill delivery app for iOS. 


When camera permission is denied, the app displays a "Camera Unavailable" dialog with a "Settings" button — a standard iOS pattern intended to direct the user to the app's Settings page so they can grant permission. However, tapping "Settings" does nothing. The user is left stranded inside the app with no way to reach Settings from that dialog.


Select "Don't Allow" from this option. You (the user) have clearly given your preference to the app. Per Apple's rules, all subsequent attempts to access the camera should result in an error message displayed - along with a working "Settings" option that exists the user out of the app. This app has a "Settings" option - but it does not work.


Settings option in Goodwill Delivery app




This behavior is inconsistent with Apple's expectation that a "Settings" button executes a valid system deep-link via UIApplication.openSettingsURLString. It appears to be a violation of App Store Review Guideline 2.1 (App Completeness), which requires that apps be fully functional before submission, with no dead ends or broken controls.

This is the first instance I have encountered of this pattern failing entirely within a shipping iOS app.

Steps to Reproduce:

  1. Download the Goodwill Delivery app for iOS (version 2.0.10)
  2. Complete any onboarding and advance to the home screen
  3. Tap the barcode icon to the right of the search input
  4. In the "Goodwill would like to access the camera" permission dialog, tap Don't Allow
  5. From the home screen, select the barcode option a second time 
  6. In the "Camera Unavailable" dialog, tap Settings

Result: Tapping "Settings" does not navigate the user to the iOS Settings app or to the app's Settings page. The user remains inside the app with no recourse.

Expected: Tapping "Settings" should open the iOS Settings app to the Goodwill Delivery permissions page, allowing the user to grant camera access.