Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
EU Apple

Developers Now Required To Share Phone Number and Address On EU App Store (macrumors.com) 84

An anonymous reader quotes a report from MacRumors: Apple today reminded developers that the EU trader requirement in the European Union is now being enforced. Developers who distribute apps in the EU will now need to share information that includes address, phone number, and email address on the EU App Store. Submitting updates for apps on the App Store in the European Union now requires trader information that's added via App Store Connect, with those details shared on each developer's App Store page. App updates can no longer be submitted without trader information, and starting on February 17, 2025, apps that do not have a trader status set will be removed from the App Store in the EU until trader status is provided and verified.

The Digital Services Act (DSA) in the European Union requires Apple to verify and display trader contact information for all "traders" who are distributing apps on the App Store in the European Union. Developers who make money from the App Store through either an upfront purchase price or through in-app purchases are considered traders, regardless of size. Contact information for each developer that is considered a trader will be publicly available, and there will undoubtedly be some developers that are unhappy with the requirement. Independent developers and small companies may not have dedicated business addresses and phone numbers to provide, and will likely be reluctant to provide their personal contact information.
You can learn more about the requirements on Apple's website.
This discussion has been archived. No new comments can be posted.

Developers Now Required To Share Phone Number and Address On EU App Store

Comments Filter:
  • by Hank21 ( 6290732 ) on Thursday October 17, 2024 @04:51PM (#64873059)
    Shocked that it was not already a requirement. Most of the apps I used know everything about me - my phone number, name location etc.. It's about time the tables are evened out a little and there is a name tied to who exactly is getting my personal data.
    • by AmiMoJo ( 196126 )

      Came here to say the same thing. I'm pretty sure that Google has required this for many years. Even for the Chrome Web Store they do.

      No wonder there is so much malware on iOS.

    • How would my app (on Apple's App Store) know your phone number, name and location, when I have no reason to know it, Apple won't let me on the store if I ask for it, and you would be a complete idiot to hand it out?

      There are about 6,000 people who downloaded and hopefully enjoyed my app. I don't know anything about any of them. Nothing. Nada. And I don't care. Don't want my app, don't download it, or delete it.

      Until you have evidence otherwise, STFU.
    • by 0xG ( 712423 )

      Most of the apps I used know everything about me - my phone number, name location etc..

      Only if you choose to share it with them. I don't.

  • Makes sense (Score:5, Informative)

    by gweihir ( 88907 ) on Thursday October 17, 2024 @04:52PM (#64873061)

    That way malicious and grossly negligent developers can actually be identified.

    • by Anonymous Coward

      That way malicious and grossly negligent developers can actually be identified.

      But why does it need to be publicly available? I mean, I guarantee that asshole will use this info to harass people.

      • Business registers are public in the EU, and something tells me that they are in the US as well.
        • In the US you register in a particular state. I can't say for all 50 but when I created an LLC in California that information was certainly freely available online in an easy to find location with a sufficiently acceptable search engine built in. Open to anyone with a browser.

          My assumption is all 50 states have their own version of the same thing.

          • by mysidia ( 191772 )

            Yes, but the address on file there can be your registered agent. You only need to provide an agent's address to register a corporation, and not yours. Ancillary info such as an Email address or Telephone number is also not necessary, but if you chose to put it you can also put your registered agent's info.

            The agent's only job is to be served with legal paperwork from the state, or a court if your business is being sued. And they cannot be contacted for any other purpose (would reject the call).

            The f

            • As if No-Call-Lists and similar have ever been effectively enforced.

              • by mysidia ( 191772 )
                I think you misunderstood. This system doesn't rely on no-call lists. You have a telephone number listed that is a virtual number that always goes to voicemail, and the voice mailbox is always full. A dedicated email account that goes to a mailbox that is hardly ever read. And a physical mailing address that points to a hired registered agent who throws away any mail received except for legal correspondence.
    • by Anonymous Coward

      Like it does with WHOIS? This will be trivial to get around, as below.

  • by thedarb ( 181754 ) on Thursday October 17, 2024 @05:13PM (#64873107)

    Burner app phone number(s), online po boxes, and plenty of places to stand up and abandon such an email address. Effectively useless law.

    • I assume that a trader doesn't get to decide which information that Apple should make public but instead that if you meet the criteria of a trader that Apple will publish the information that THEY have on you which is the one they use to contact you (app certificate renewals, payments and so on).
      • by mysidia ( 191772 )
        Nah.. I would assume of course the trader can set separate Public information that is Not the private email address and contact details on the account itself.

        To set up trader information for Apple, you can do the following:
        1. 1. Go to the Business module
        2. 2. Select Digital Services Act under Compliance
        3. 3. In the pop-up window, change your trader status or contact information
        4. 4. If you're a trader, you'll need to enter contact information for display on your Apple product pages
        5. 5. Validate your email addre
    • Another use for that 1-800-EAT-SHIT number.

  • This is not true, at least not under EU rules. Personal data may not be shared publicly, so if a developer doesn't have a business phonenumber or address, it may not be publicly available.
    • If they don't have business contact details, how are they in business?

      Presumably you don't need to provide this information if your app is free and have no in-app purchasing.

      • As I understand, it is about having your information publicly published by the appstore, not about providing the information to Apple (which to me is a no-brainer).
    • Quite true. (Score:5, Informative)

      by IcyWolfy ( 514669 ) on Thursday October 17, 2024 @07:15PM (#64873309) Homepage

      The EU Directive requires all earning revenue on a digital service, via the Digital Services Act.
      The developer must " notify the name, postal address, email address and telephone number of their legal representative to the Digital Services Coordinator in the Member State where that legal representative resides or is established."

      Failure to provide full information is subject to fines, for failing to provide adequate direct contact to reach the developer.

      Failure to provide verified name, address, and phone number, or failure to publish the information clearly, is in direct violation of EU law.

      More specifically, Article 30:

      Providers of online platforms allowing consumers to conclude distance contracts with traders shall ensure that [...] they have obtained the following information, applicable to the trader:

      1 (a) the name, address, telephone number and email address of the trader;

      7 The provider of the online platform allowing consumers to conclude distance contracts with traders shall make the information referred to in paragraph 1, points (a), [...] available on its online platform to the recipients of the service in a clear, easily accessible and comprehensible manner

      • What about free apps that don't "enter in a contract"?

        Sure, if you can pay for the app, you should be able to know who you are paying, but for free apps, ads supported or not, I don't see why that would be required.

        If apple requires that also far free apps, that looks too me like malicious compliance to fuck even more with the EU, and/or to drive solo developpers and hobbyists away even more and should be punished.

      • Yes, they must provide the information to the service, but the service is not alllowed to publicly provide the information on their site without explicit consent of the developer. As I understand, this article is about publishing the information to the public.
    • by Luckyo ( 1726890 )

      Under EU rules, businesses do not have consumer protections. You are referring to consumer protections.

      "Trader" status under DSA is a bit weird because it also includes "people practicing their profession or craft" at least according to Apple. So professionals who are not a business. Probably another one of the "poorly written policy/regulation/legislation" issues.

      • No, not consumer protection. In The Netherlands for instance, the private adresses of ZZP-ers are not allowed to be publicly available, without the explicit consent of the person. Many businesses are still on personal title, and fall under the same privacy law here in our country, which is part of the EU.
        • by Luckyo ( 1726890 )

          You:

          >at least not under EU rules

          Me:

          >this is how it is under EU rules

          You:
          >But under Dutch rules...

          Yes, individual nations may add additional protections. Under EU rules however, your initial chosen metric such protections only cover consumers, not businesses.

    • by Luckyo ( 1726890 )

      Slight correction to my previous post, I went to read the relevant regulation because I trust Apple with exactly nothing:

      https://eur-lex.europa.eu/eli/... [europa.eu]

      Article 3, section f:

      ‘trader’ means any natural person, or any legal person irrespective of whether it is privately or publicly owned, who is acting, including through any person acting in his or her name or on his or her behalf, for purposes relating to his or her trade, business, craft or profession;

      So yes, legislation itself is written eithe

  • Dom names / whois (Score:4, Interesting)

    by Bert64 ( 520050 ) <.moc.eeznerif.todhsals. .ta. .treb.> on Thursday October 17, 2024 @05:59PM (#64873177) Homepage

    Wasn't it the EU that basically forced whois records to hide the address and phone number of the registrant, even when a domain is owned by a business?

    I find it extremely shady when a company uses a domain privacy service, a legitimate business should be contactable and locatable, so it makes sense for this information to be available before you acquire any monetized app. They should require that business domains display such information too, and only allow hiding that information for personally owned domains.

    • Re:Dom names / whois (Score:5, Informative)

      by F.Ultra ( 1673484 ) on Thursday October 17, 2024 @06:27PM (#64873239)
      Not really, it was ICANN themselves that decided to hide those details in fear that they would otherwise violate the GDPR. However GDPR only covers personal information and not commercial/business information so if they removed also info to businesses then ICANN removed more than they had to.
      • by PPH ( 736903 )

        Does ICANN (or various registrars) have a personal/business field in their DNS data?

        • by Anonymous Coward

          Does ICANN (or various registrars) have a personal/business field in their DNS data?

          "whois" data, and yes, they do, it's been that way since the 80s
          Contact fields are by a persons role in managing the domain, they aren't specifically separated by business/personal.

          For instance "owner" is for who has ultimate control over the domain and its other roles, and this is for either a business or personal contact.

          "technical" is often set when someone else is doing the tech work, often the hosting company, which if the domain is owned by an individual will now cause a mix of both business and perso

          • by PPH ( 736903 )

            "whois" data, and yes, they do, it's been that way since the 80s

            OK. I misstated my question. Does DNS have a field signifying that an entry is either a personally or business owned domain?

            • by mysidia ( 191772 )
              OK. I misstated my question. Does DNS have a field signifying that an entry is either a personally or business owned Most domain registrars have a field for Company Name. So if you populate the company name field, then the contact is understood to be the name of a business. I would point out that contact Information recorded in WHOIS was Not standardized to only contain a specific predetermined set of fields. It was a flexible protocol, and each domain registrar could add Any kind of Attribute + T
          • It only takes one person in the EU to go argue their business contact is actually personal, and then it becomes an expensive legal fight for icann with a real chance they could lose.

            That is not at all how it works.

        • No. Whois data assumed that all domains would be owned by businesses, which was quite obvious back in the 90s.

    • by mysidia ( 191772 )
      even when a domain is owned by a business? No. The EU just said WHOIS was not GPDR-compliant. Because the directory also contained personal contact information not just Business contact information.
  • by RegistrationIsDumb83 ( 6517138 ) on Thursday October 17, 2024 @08:00PM (#64873355)
    These rules seem mostly to benefit assholes who want to doxx and harass random small time app/game devs. Beyond a contact email, there's not really much need for a platform to post devs address and phone. We don't need to empower the swatters.
    • by Luckyo ( 1726890 ) on Friday October 18, 2024 @12:51AM (#64873641)

      Actually the main thing these registries are used for are business scams. Have been for a long time, which is why a lot of hobbyists don't want to register as a registered business.

      Essentially there are companies in EU that make their living scamming small businesses by going through registries and then sending fake invoices for supposedly small business related services, as well as make threatening calls that "you need to pay this much for your registration (on our shitty website that actually has nothing to do with official business registry) to be valid".

      Even in small nations like mine, this industry is assessed as being worth at least tens of millions each year. And it's completely legal, because businesses do not enjoy consumer protections, and these are just considered hard B2B sales tactics as long as they avoid a handful of things that are actually illegal in that space.

    • These rules seem mostly to benefit assholes who want to doxx and harass random small time app/game devs. Beyond a contact email, there's not really much need for a platform to post devs address and phone. We don't need to empower the swatters.

      My first thought was that if a small-time dev starts to gain some decent traction with an app, it'd make it much easier for the big-boys to contact for purchase, then harass the ever loving shit out of them by spamming them into oblivion via all contact routes required. Same result, just from different directions.

    • Swatting is a US thing. No such thing as 'swat teams' in EU.

      Also, no scam or robocalls in EU either, unlike luckyo claims in their first post.
      OK, I'm lying. I got one unsolicited phone call (some 10ish years ago) by some "Peter from Microsoft" with an obvious Indian accent who eventually wanted me to install Teamviewer. I say, eventually, cos I had nothing at hand that morning and kept the sucker busy for the best part of an hour. At least that Peter didn't annoy any others all that time, and I had my giggl

  • iOS users in the EU can now sideload apps, can't they? So, if you can't publish your app on the Apple store, publish it on your own webpage.

  • So it's perfectly fine for an app developer to get my phone number, email, address info, and far more than that from the App Store or directly from my device when I use their app; but it's not fine for me to get the developer's contact information when I pay them for the app in case I have a support need?

    Are these developers too stupid to use some kind of rented postbox, a $5/mo Google Workspace account for a business email box, and a free Google Voice number as a business number?

    I mean they're trying to ac

    • So it's perfectly fine for an app developer to get my phone number, email, address info, and far more than that from the App Store or directly from my device when I use their app; but it's not fine for me to get the developer's contact information when I pay them for the app in case I have a support need?

      Are these developers too stupid to use some kind of rented postbox, a $5/mo Google Workspace account for a business email box, and a free Google Voice number as a business number?

      I mean they're trying to act like a business by taking money for software, so maybe act like a business. I'm sure the taxing authority would like to know about it, and get this information too.

      Exactly!

      I gotta wonder about a supposed Business that wants to hide its identity; especially since it is so easy to set up a "Digital Presence" for Business Purposes.

/earth: file system full.

Working...