Problems publishing .NET MAUI app with Shiny NuGet Package due to missing iOS Privacy Manifest

[benjitters]

Using Shiny.Hosting.Maui / Push / Push.FirebaseMessaging version 3.3.4

Can you confirm when Privacy Manifest will be available for the package as our app is rejected by Apple due to the missing manifest.

[aritchie]

Can you confirm when Privacy Manifest

I won't be publishing any. You can use this to generate a privacy manifest to add to your app https://shinylib.net/client/appbuilder/

[benjitters]

Thanks for the quick reply! Unfortunately, to date, we have been generating our Privacy Manifests but Apple appear to have made a change since 12 Feb 2025 that now enforces third party SDKs to publish their own privacy manifests and include within the SDK.

Email from App Store Connect:

ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCoreDiagnostics.framework/FirebaseCoreDiagnostics”, which includes FirebaseCoreDiagnostics, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.

If you follow the link to developer.apple.com you'll see that there are numerous Firebase SDKs specified as requiring a privacy manifest AND a developer Signature for every SDK that is on the list and used either directly or repackaged.

Apple have been quite clear that the SDK/bundle needs to include it's own Privacy Manifest:

For each executable or dynamic library in an app that uses a required reason API, the bundle that includes the executable or dynamic library needs to include a privacy manifest file that reports the API.

https://developer.apple.com/documentation/bundleresources/describing-use-of-required-reason-api

Any assistance you can provide is appreciated.

[aritchie]

Well... you either update to a new binding yourself or you wait until I do a new version.