iOS Privacy & Permissions

iOS Privacy and Permissions

Apple takes user privacy incredibly seriously across all its platforms.

As an iOS developer, you cannot simply access a user's camera, microphone, or location without their explicit consent.

iOS enforces strict sandboxing, meaning your app is isolated and must formally request access to sensitive hardware and data.

Understanding the permissions flow is critical to building a trustworthy app that doesn't crash upon launch.

The Info.plist File

Before you write a single line of code to request access, you must declare your intent in your app's Info.plist file.

The Info.plist file acts as a configuration dictionary for your application.

If you want to use the camera, you must add the NSCameraUsageDescription key.

The value for this key must be a clear, honest string explaining exactly why your app needs the camera.

If you fail to include this key and attempt to open the camera, iOS will instantly crash your app.

Requesting Permission in Code

Once the Info.plist is configured, you must trigger the system prompt in your Swift code.

This prompt is handled by the specific framework you are trying to use (e.g., AVFoundation for the camera).

import AVFoundation

func checkCameraAccess() {
    let status = AVCaptureDevice.authorizationStatus(for: .video)
    switch status {
    case .authorized:
        print("Access granted. Proceed to open the camera.")
    case .notDetermined:
        // The user has not been asked yet, let's ask them!
        AVCaptureDevice.requestAccess(for: .video) { granted in
            if granted {
                print("User accepted the prompt.")
            } else {
                print("User denied the prompt.")
            }
        }
    case .denied, .restricted:
        print("Access denied. Show an alert directing them to Settings.")
    @unknown default:
        print("Unknown authorization status.")
    }
}

Notice how we handle all possible states: authorized, not determined, and denied.

Handling Denied Permissions

If a user clicks "Don't Allow" on the initial prompt, you cannot trigger the prompt again.

Apple designed it this way to prevent apps from spamming users with permission requests.

If the status is .denied, your only option is to show a friendly UI directing the user to the iOS Settings app to manually flip the toggle.

import UIKit

func openSettings() {
    if let url = URL(string: UIApplication.openSettingsURLString) {
        UIApplication.shared.open(url, options: [:], completionHandler: nil)
    }
}

App Tracking Transparency (ATT)

If your app collects data to track users across apps or websites owned by other companies, you must use the App Tracking Transparency framework.

This displays a specialized prompt asking if the user wishes to allow your app to track them.

Failing to implement ATT correctly is a guaranteed way to get your app rejected during the App Store review process!