React Native Regulatory Frameworks & Compliance 5 — Questions and Answers
Question 1: Apple requires that apps with account creation also offer account deletion within the app. Which guideline enforces this?
- Guideline 5.1.1 – Data Collection and Storage (Correct answer)
- Guideline 3.1.3 – Subscriptions
- Guideline 2.3 – Accurate Metadata
- Guideline 4.1 – Copycats
Correct answer: Guideline 5.1.1 – Data Collection and Storage
Apple's Guideline 5.1.1 requires that if an app allows account creation, it must also provide an in-app mechanism to request account deletion.
Question 2: What Android permission group must a React Native app declare to access the device's precise GPS location in the foreground?
- android.permission.ACCESS_COARSE_LOCATION only
- android.permission.ACCESS_FINE_LOCATION (Correct answer)
- android.permission.LOCATION_HARDWARE
- android.permission.BACKGROUND_LOCATION
Correct answer: android.permission.ACCESS_FINE_LOCATION
ACCESS_FINE_LOCATION grants access to precise GPS coordinates in Android, and must be declared in the AndroidManifest and requested at runtime.
Question 3: Under SOC 2, which Trust Service Criteria is most relevant to ensuring a React Native app's user data is protected from unauthorized access?
- Availability
- Confidentiality (Correct answer)
- Processing Integrity
- Privacy
Correct answer: Confidentiality
SOC 2's Confidentiality criteria covers controls that protect data designated as confidential from unauthorized disclosure.
Question 4: Which App Store Connect metadata field helps Apple reviewers assess whether your app's age rating is compliant before approval?
- App Category
- Age Rating questionnaire (Correct answer)
- Privacy Nutrition Label
- App Description
Correct answer: Age Rating questionnaire
App Store Connect's Age Rating questionnaire asks about content types (violence, gambling, etc.) to automatically assign the appropriate age rating.
Question 5: A React Native app uses `react-native-track-player` and shows ads via a third-party ad SDK. Under GDPR's legitimate interest assessment, which factor weighs most against relying on legitimate interest?
- The ad SDK is located outside the EU
- Users would not reasonably expect their listening data to be used for ad targeting (Correct answer)
- The app is free to download
- The developer is a small startup
Correct answer: Users would not reasonably expect their listening data to be used for ad targeting
Legitimate interest is undermined when users would not reasonably expect their data to be used in the proposed way, as GDPR requires a reasonable expectation test.
Question 6: When integrating Facebook's React Native SDK, which CCPA-specific API must developers call to signal that a California user has opted out of the sale of their data?
- Settings.setDataProcessingOptions(['LDU'], 1, 1000) (Correct answer)
- AppEventsLogger.setUserID(null)
- FacebookSdk.setLimitEventAndDataUsage(true)
- GraphRequest.setPrivacyMode('CCPA')
Correct answer: Settings.setDataProcessingOptions(['LDU'], 1, 1000)
Facebook's SDK requires calling `Settings.setDataProcessingOptions(['LDU'], 1, 1000)` to enable Limited Data Use mode for California users under CCPA.
Question 7: Which international standard provides a framework for information security management systems (ISMS) that React Native development teams may certify against to demonstrate security compliance?
- PCI DSS
- ISO/IEC 27001 (Correct answer)
- NIST SP 800-53
- CIS Controls
Correct answer: ISO/IEC 27001
ISO/IEC 27001 is the internationally recognized standard for establishing, implementing, and certifying an Information Security Management System.
React Native Regulatory Frameworks & Compliance 5
Apple requires that apps with account creation also offer account deletion within the app.
Which guideline enforces this?