What the scanner checks
StoreShield inspects the archive structure and embedded frameworks without uploading the binary.
- ✓ Missing PrivacyInfo.xcprivacy files in the main app or SDKs.
- ✓ Empty collected data declarations where collection signals exist.
- ✓ Required Reason API usage that needs a matching manifest reason.
How the Review Room explains it
The Privacy gate is not just a list of files. It shows verdict, evidence, confidence, and the next fix.
- ✓ PASS, RISK, BLOCK, or MANUAL status for the privacy gate.
- ✓ Linked issues with evidence and affected bundle paths.
- ✓ Submission Pack export with fix plan and reviewer notes draft.
Local-first workflow
Pre-release archives often contain unreleased product, client, or agency work.
- ✓ No automatic network upload of the archive.
- ✓ Optional context imports stay local.
- ✓ AI explanations are optional and disabled by default.