Friday, January 24, 2025

Phissy: Restaurant Organizer app for iOS: In-App Privacy Policy and Terms and Conditions Links Do Not Work

 iOS 18.2.1

Phissy: Restaurant Organizer app for iOS (version 10.2.11)

01/24/2025

Description:

An app called Phissy: Restaurant Organizer for iOS has a problem. The in-app links to "Privacy Policy" and "Terms and Conditions" do not seem to work. Selecting these options (which appear in a pop-up) do not take the user to either a privacy policy or a valid terms and conditions. 

Curiously, this only occurs with the "Privacy Policy" and "Terms and Conditions" links that are presented from inside the app. The equivalent links in Phissy's Apple App Store detail page work as expected and take users to valid Terms and Privacy Policy pages. 

In essence: the in-app options just do not work. There's no redirect out of the app a privacy policy or terms and conditions page. According to Apple's App Store rules: all apps must include a working link to their privacy policy, "within the app and in an accessible manner."

This is how these non-working options appear in-app:


Click on either "Privacy Policy" or "Terms and Conditions" does nothing - they do not take the user to valid and readable privacy policies or terms and conditions pages. 


Steps to Reproduce:

1. Download and launch the Phissy: Restaurant Organizer app for iOS

2. From the "Welcome to Phissy!" screen, scroll down and click on either "Terms and Conditions" or "Privacy Policy"

3. From the pop-up select either "Privacy Policy" or "Terms and Conditions"

Result: The in-app Privacy Policy and Terms and Conditions links inside of the Phissy app are not working - clicking on either option does not take the user to a valid Privacy Policy or Terms and Conditions 

Expected: The in-app Privacy Policy and Terms and Conditions links inside of the Phissy app should always work. User should always shave access to the Privacy Policy


Download and launch the Phissy: Restaurant Organizer app for iOS...


From this screen, select either "Privacy Policy" or "Terms and Conditions"


The "Privacy Policy" and "Terms and Conditions" options do not work. 







Wednesday, January 22, 2025

OneDayOnly - Online Shopping app for iOS: Google OAuth Consent Screen: Incorrect App Name of project-4272050226

 iOS 18.2.1

OneDayOnly app for iOS (version 4.3.0)

01/22/2025

Description:

The Google OAuth sign-in screen for the OneDayOnly - Online Shopping app for iOS displays an app name of:



This obviously isn't an accurate representation of what the user is logging into. 

Steps to Reproduce:

1. Download the OneDayOnly app for iOS

2. Select the "Account" option 

3. Select the "Log in" option 

4. Select "Log in with Google"

5. From the Google pop-up prompt select "Continue"

6. Note the name "project-4272050226" on the Google consent screen

Result: The app name listed on the Google OAuth consent screen for the OneDayOnly iOS app displays as "project-4272050226" - this is misleading to the end user 

Expected: The OneDayOnly iOS app should display the correct name of the app on the Google OAuth consent screen 





Download and launch the OneDayOnly app for iOS app...




Select the "Account" option...


Select the "Log in" option...


Select the "Log In With Google" option...


Select the "Continue" option from the pop-up...


Incorrect app name of: project-4272050226









Tuesday, January 21, 2025

HolidayPirates app for iOS: Awkward Error Messaging after Cancelling Apple Sign-in

 iOS 18.2

HolidayPirates app for iOS (version 4.10.5)

01/21/2025

Description:

The Holiday Pirates app for iOS has a less than friendly error message after the user cancels out of the Apple Sign-in process:



Apple's Human Interface Guidelines state that error messages should be clear, concise and user-centric. This error message is not that. 

You will see this error message happen occasionally with other apps. I've written about it a handful of times. 

Steps to Reproduce:

1. Download and launch the HolidayPirates app for iOS
2. Advance through the Select country feature 
3. From the "Log in or create a new account" screen select "Continue with Apple"
4. Dismiss the Apple Sign-in menu
5. Note the error message that includes as error string of: "(com.apple.AuthenticationsServices.AuthorizationError error 1001.)"

Result: A less than informative and non user-friendly error message is displayed by the HolidayPirates app after the users cancels out of the Apple Sign-In option during account creation. The app displays an error message that displays the non-informative string of: (com.apple.AuthenticationsServices.AuthorizationError error 1001.)"

Expected: No iOS app should display text such as "(com.apple.AuthenticationsServices.AuthorizationError error 1001.)"




Download and launch the TravelPirates app for iOS...


Select the "Continue with Apple" option...


Cancel out of the Apple Sign-In menu. The menu will quickly descend and will be replaced by...


A less than informative error message. 







Sunday, January 19, 2025

MyColumbiaCU app for iOS: Privacy Policy and Developer's Privacy Policy Links in the Apple App Store lead to a AWS NoSuchBucket Error Message

 iOS 18.2

MyColumbiaCU app for iOS (version 4.2)

Date: 01/19/2025

Description: 

Here's an odd one: instead of a 404 page indicating a lack of a correct link to a privacy policy, an app connected to a credit union called MyColumbiaCU has two links that lead to an AWS invalid bucket error message. These two links are the Privacy Policy and Developer's Privacy Policy links from the Apple App Store listing for the app. 


The bad link can be found at: https://ingaged-config.s3.amazonaws.com/static/privacy_policy.html

I'll write a review, report this with Apple, and try to send an email to the company that released the app. 

Steps to Reproduce:

1. Head to the MyColumbiaCU app for iOS Apple App Store listing 
2. Click on either "Privacy Policy" or "Developer's Privacy Policy" 

Result: From MyColumbiaCU's Apple App Store detail page, both the Privacy Policy and Developer's Privacy Policy links lead to an AWS NoSuchBucket Error page 

Expected: The Privacy Policy and Developer's Privacy Policy links on the MyColumbiaCU Apple App Store listing should link to valid privacy policies 


Head to the Apple App Store listing for the MyColumbiaCU app for iOS. Scroll down to either the "Developer's Privacy Policy" or "Privacy Policy" links. 


Click on a link such as Developer's Privacy Policy...










Wednesday, January 15, 2025

Kitsap Credit Union app for iOS: Privacy Policy and Developer's Privacy Policy Links in the App Store Lead to a 404 Page

 iOS 18.2

Kitsap Credit Union app for iOS (version 2024.10)

01/15/2025

Description:

The Apple appstore listing for an app called Kitsap Credit Union has a problem: the "developer's privacy policy" and "Privacy Policy" links in the Apple App Store listing lead to a 404 page. 

They are linking to this page, which is currently a 404:

https://kcu-website-frontend.azurewebsites.net/pdf/privacypolicy.pdf/


Steps to Reproduce:

1. Head the Apple App Store listing for the Kitsap Credit Union iOS app

2. Select either "developer's privacy policy" or "Privacy Policy"

Result: the "developer's privacy policy" and "Privacy Policy" links on the Kitsap Credit Union's app for iOS in the Apple App Store link to a 404 page

Expected: per Apple's requirements, end users must always have access to a privacy policy. Any end user of a financial app should always have access to the relevant privacy policy



Head to the Apple App Store listing for the Kitsap Credit Union app for iOS...


Select the "developer's privacy policy" link on the Apple App Store listing, or...








Tuesday, December 17, 2024

Cleats Club app for iOS: No Apple Logo on the "Sign in with Apple" button

 iOS 18.2

Cleats Club app for iOS (version 1.1.3)

12/17/2024

Description:

Here's an odd one that I haven't seen before. An app called "Cleats Club" has the similar "Sign in with Apple" option that many apps have. 

The issue here is that this app's "Sign in with Apple" button is lacking the Apple logo. Here's a screenshot of how it looks inside the app:


I have downloaded many, many apps that have the Apple sign-in option. I cannot recall an app that had a "Sign in with Apple" app that lacked an Apple logo. 



I can't seem to find an exact requirement for the logo, but it seems clear that Apple's guidelines for implementation of the button imply that it's required. 


Here's some example of the "system-provided buttons" - as you can see, the logo is a prominent part of providing a sense of legitimacy to the button.

Two "Sign in with Apple" buttons for use on white backgrounds...


Two more buttons for use with "White with outline"

With black.

There's an admonition that Apple's "App Review evaluates all custom Sign in with Apple buttons." 


Steps to Reproduce:

1. Download the Cleats Club app for iOS 
2. Skip forward to the "JOIN THE CLUB" pop-up menu
3. Note the "SIGN IN WITH APPLE" button 

Result: the "Sign in with Apple" button inside of the Cleats Club app lacks an Apple logo

Expected: the "Sign in with Apple" button used by the Cleats Club app should, presumably, include the Apple logo 








Tuesday, December 3, 2024

Up4Grabs app for iOS: Privacy Policy and Developer's Privacy Policy links in App Store lead to 404 Pages

 iOS 18.1.1

Up4Grabs app for iOS (version 1.4.0)

12/03/2024

Description:

The "Privacy Policy" and "Developer's Privacy Policy" links in the Apple App store detail page for the Up4Grabs app lead to 404 pages. 

This the link:

https://up4grabs.com/privacy

That users are taken to if they select these links from the Apple App Store's detail page. 

The "developer's privacy policy" link leads to a 404 page...

This "Privacy Policy" link leads to a 404 page...








Steps to Reproduce:

1. Head to the Up4Grabs listing in the Apple App Store

2. Click on either the "Privacy Policy" or "Developer's Privacy Policy" links

Result: The "Privacy Policy" or "Developer's Privacy Policy" links take the user to a 404 page 

Expected: The "Privacy Policy" and "Developer's Privacy Policy" links should NOT lead to 404 pages - they should lead to valid privacy policy pages