Developers that use these or similar surreptitious behaviors will have their apps removed from the App Store. Apps must not trick or force people to reveal information unnecessarily.

But the larger issue here is that all of this is taking place under Apple’s very nose, in an application that has supposedly been through a rigorous review process, with multiple capabilities that fly directly in the face of Apple’s published rules.Īpps that collect and store data must receive permission to do so. There are also some previously unacknowledged holes in Apple’s sandboxing capabilities, given that the malware is able to extract a list of all running processes (Wardle steps through how it accomplishes this).