{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"id":"apple/sign-in-with-apple","name":"Sign in with Apple (web and non-Apple platforms)","status":"researched","last_verified":null,"last_researched":"2026-10-25","disclaimer":"Plain-English summary of the provider’s rules and of what people report. Not legal advice.","terms":[{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Apple's docs say web use needs an App Store app","text":"Apple's configuration guide states that for users to authenticate with your web service you must have an existing app in the App Store that uses Sign in with Apple, and the Services ID must be tied to a primary App ID. \"[to verify] whether a published app is enforced for web-only use.\"","source_url":"https://developer.apple.com/documentation/signinwithapple/configuring-your-environment-for-sign-in-with-apple","source_title":"Configuring your environment for Sign in with Apple","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Third-party login in an iOS app needs an equivalent option","text":"Apps that use Google, Facebook, X or similar login for the primary account must also offer an equivalent login that limits data to name and email, lets users hide their email, and does not track for ads without consent - Sign in with Apple qualifies. Exceptions exist (own accounts only, enterprise/education, eID).","source_url":"https://developer.apple.com/app-store/review/guidelines/","source_title":"App Review Guidelines - Apple Developer","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Account deletion","text":"If your app supports account creation it must offer account deletion within the app.","source_url":"https://developer.apple.com/app-store/review/guidelines/","source_title":"App Review Guidelines - Apple Developer","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"Never share the private key","text":"Never share private keys outside your developer team. If one is compromised, create a new key, switch over, then revoke the old one.","source_url":"https://developer.apple.com/documentation/signinwithapple/configuring-your-environment-for-sign-in-with-apple","source_title":"Configuring your environment for Sign in with Apple","accessed":"2026-10-25"}],"renewals":[{"what":"Client secret JWT (exp no more than six months ahead)","every":"6 months","source_url":"https://developer.apple.com/documentation/accountorganizationaldatasharing/creating-a-client-secret"}],"pricing_notes":{"free_tier":null,"costs":null,"notes":"No separate price stated; requires an Apple Developer Program membership.","source_url":"https://developer.apple.com/documentation/signinwithapple/configuring-your-environment-for-sign-in-with-apple"},"guide_url":"https://verapli.com/guides/apple/sign-in-with-apple"}