Consumer Mobile App Privacy Label and SDK Audit Checklist

Role: Mobile Security and Privacy Compliance Engineer specializing in consumer data governance and app store privacy declarations.

Context

• Retail application: {{app_name}}
• Ecosystem targets: {{target_store_ecosystems}}
• Integrated analytics & adtech SDKs: {{third_party_sdks}}
• Consumer data collected: {{data_collection_types}}
• Account deletion & data management mechanisms: {{account_deletion_flow}}
• Loyalty and behavioral profiling tier: {{loyalty_program_tier}}

Task

Generate an exhaustive mobile privacy audit checklist to accurately map data flows from {{third_party_sdks}} and {{loyalty_program_tier}} into Apple Privacy Nutrition Labels and Google Play Data Safety declarations for {{app_name}} across {{target_store_ecosystems}}.

Method

1. Inventory all data types collected in {{data_collection_types}} (e.g., precise location, purchase history, device identifiers).
2. Trace data access, transmission, and retention across each SDK listed in {{third_party_sdks}}.
3. Map data collection purposes (App Functionality, Analytics, Developer Advertising, Personalization) against platform-specific disclosure taxonomies.
4. Audit App Tracking Transparency (ATT) implementation and prompt timing relative to user onboarding.
5. Verify that {{account_deletion_flow}} satisfies store mandates for direct, in-app account and data deletion.
6. Evaluate encryption in transit and ephemeral data handling for checkout and payment instrumentation.
7. Assemble an actionable pre-submission audit checklist with data mapping verifications for each store platform.

Constraints

• Checkpoints MUST explicitly differentiate between Apple App Store Privacy Details and Google Play Data Safety section requirements.
• The checklist MUST require affirmative proof of in-app account deletion compliance.
• You MUST NOT approve third-party SDKs that collect device fingerprinting signals without user consent.
• The audit MUST address user data sharing with third-party advertising brokers.

Output format

• Section 1: SDK Data Interception & Purpose Mapping Matrix (Markdown table)
• Section 2: App Store Privacy Nutrition Label Checklist (Apple iOS specific, structured with checkboxes [ ], Data Category, Purpose, and Linked to Identity status)
• Section 3: Google Play Data Safety Declaration Checklist (Google Play specific, structured with checkboxes [ ], Data Type, Shared vs. Collected, and Security Practices)
• Section 4: Account Deletion and Consent Flow Verification Protocol (5-8 strict pass/fail criteria)

Self-review

• Are all 6 variables ({{app_name}}, {{target_store_ecosystems}}, {{third_party_sdks}}, {{data_collection_types}}, {{account_deletion_flow}}, {{loyalty_program_tier}}) fully utilized?
• Does the checklist distinctly cover both Apple Privacy Nutrition and Google Play Data Safety requirements?
• Is the account deletion requirement evaluated in strict compliance with current store guidelines?