Guideline 4.8 Login Services: a Google or social login needs an equal option
Your app lets people use Google, Facebook or X for their main account, without an equal, more private option beside it.
Apple's words
“a third-party or social login service (such as Facebook Login, Google Sign-In, Log in with X ...) to set up or authenticate the user's primary account”
“must also offer as an equivalent option another login service”
What it means
The second option must limit the data it collects to name and email, let people keep their email private, and not collect what they do for advertising without their consent.
The current text doesn't name Sign in with Apple. If you add it, have your builder confirm it meets each of those conditions.
Check the exceptions before you add or remove anything. An app that “exclusively uses your company's own account setup and sign-in systems”, for example email and password alone, needs no second option. The guideline lists others.
If you offer Sign in with Apple, account deletion also has to “revoke user tokens”.
What caused it for us
We haven't had this rejection ourselves. This page follows Apple's current rules, checked 9 November 2026.
What to check first
- List every sign-in button in the app.
- Does a social login create or open the app's main account?
- Does one of the exceptions in 4.8 fit your app?
- No exception fits? Then you need an equal second option that meets those conditions. Is it there?
- Whatever sign-in someone used, can they delete their account from inside the app?
Kept for the paid guide
These three parts are in the paid guide only:
- The exact App Store Connect clicks. What to update in App Review Information and Notes before you resubmit.
- The prompt to paste into your AI builder. A prompt that lists the sign-in options, tests the exceptions and checks deletion for each sign-in type.
- The reply to Apple. A reply for each case: the exception that applies, or the new option.