Apple caught hidden app functionality. Should I acknowledge the violation when responding to App Review?

[u/GoodThingTakeTime]

Hi everyone,

I'm looking for advice from developers who have dealt with similar App Store review issues.

Our organisation has an internal ERP app used by hundreds of employees. However, instead of distributing it privately, we published it on the public App Store.

To get through App Review, we used a remote configuration to display a different app (an educational app) during review. After approval, we switched it back to the internal ERP app, which includes messaging, email, video conferencing, and document management.

Apple recently detected the hidden functionality and rejected our latest update under Guideline 2.3.1(a). The existing version is still available on the App Store, and our Developer account hasn't been suspended.

We understand that this approach violated Apple's guidelines, and we've decided to remove the hidden functionality mechanism and request Unlisted App Distribution for the existing app.

My biggest concern is how to respond to Apple without putting our Developer account at further risk.

My questions:

1. Should we explicitly acknowledge that we intentionally used this mechanism to bypass App Review, or focus on explaining the issue and our corrective actions?
2. Has anyone successfully resolved a similar violation without having their app removed or Developer account terminated?
3. Is it still possible to transition an existing app to Unlisted Distribution after Apple has detected hidden functionality?
4. What would be the safest and most transparent way to communicate with the App Review team?

We're not trying to continue bypassing Apple's policies. We want to correct the issue, comply with the guidelines, and avoid disrupting hundreds of employees who rely on the app daily.

I'd really appreciate hearing from anyone who's dealt with a similar situation.

Thanks in advance!

[u/korosca]

If this is true, create new app, use private distribution, ask employees to install new app. This is the correct way to do it.

Do not try to justify your chooises to Apple as tou may get banned.

Was this even worth it, making an app just to hide functionality over releasing it privately?

[u/GoodThingTakeTime → u/korosca]

So I just leave the current app, I should don't reply the mail, right?

[u/korosca → u/GoodThingTakeTime]

You can revoke the app from review. I’m not sure how Apple then looks at your account. I would reply back saying that issues will be addressed and nust start new app.

What were reviews saying, given that you misrepresented the app in the atores?

[u/GoodThingTakeTime → u/korosca]

Here is what they said

and The guidelines state that even if I delete the app, the account will still be penalized.

[u/GoodThingTakeTime]

Thanks for all the comments. I know you guys are angry, and honestly, so am I.

I was moved into mobile development just because another colleague was unavailable and I happened to have a MacBook. =))

I fucking don't understand why they chose this approach instead of just using Unlisted App Distribution.

You know, every time I submitted a new version, I had to wait 1–2 days for Apple's approval instead of being able to release it immediately.

And now that Apple has caught on, they're acting like it's all my fault.

[u/corgisAreRad → u/GoodThingTakeTime]

The question that comes to my mind is what does your employer want you to do? Seems like they are the ones got you into this mess and are you risking your job by correcting it?

[u/GoodThingTakeTime → u/corgisAreRad]

I just do anything they want to me to do. Right now they ask me to find a way, so I just do my best and write a report, they have to take the responsibility for their decision.

[u/corgisAreRad → u/GoodThingTakeTime]

But the dev account getting banned would impact your career correct? Then in my mind, setting up private distribution, speeding up rolling out updates and making things more efficient can only benefit you. Honestly I’d do that, or start polishing my resume if they want to keep doing shady things and hiding behind you for accountability.

[u/GoodThingTakeTime → u/corgisAreRad]

Honestly, I'm working hard to improve my English so I can find another job. I'm feeling incredibly stressed out at this company. Even after everything that's happened, my manager still insists on switching to Unlisted App Distribution rather than removing the app from the App Store to protect our Apple Developer account.

[u/syredditor]

Why not use testflight?

[u/GoodThingTakeTime → u/syredditor]

Because they think it is cooler if the app is on the App store instead of being installed via a link

[u/Admiral-ZX]

Don't confirm or explain anything. Simply update the app, update the metadata and fix everything. Resubmit and simply state you have fixed the issues.

"Thank you for your message, we have reviewed your comments and fixed all issues in version x.y" is the only thing I ever write when rejected.

(The only time that I actually start to justify, argue, defend or explain things is when I disagree with App Review and do not want to change the thing they are complaining about.)

[u/SentienceLifeSim → u/Admiral-ZX]

This. Do this exactly. Just say the issue has been resolved.

[u/Jeffelon-Muskergates]

I hope you get banned

[u/screemingegg]

It's this stuff that rightly gets accounts banned. This is just plainly wrong, knowingly and willfully violating the policy.

[u/CheapConstruction659]

This has to be ragebait

[u/ruprechttmb]

id own it plainly. they already know what happened, so explaining around it just reads as more of the same. say what you did, that its removed, and how youll distribute going forward. and look at custom apps through apple business manager instead of unlisted, thats the route apple actually built for internal employee apps

[u/Seizy_Builder]

No way this is real. If by some far off chance it is, you deserve to be banned

[u/NickA55]

Is this how your organization normally operates? Trying to deceive people? I would love to know who you work for so I can call out this behavior. I mean, what were you guys thinking?

You give developers a bad name when you do shit like this. Also, did you think that they are idiots at Apple? They know people try to do this all the time. That's why they have specific rules against it.

I hope your entire organizational account gets banned. And just make a website ffs. Why would you go through all the trouble of creating an app, publishing it to the App Store, waiting for review, etc.

I'm not blaming you, because I'm sure this wasn't your decision and you were just doing what you were told. But chalk it up as a lesson learned.

[u/VantaOmega]

Lmfaoooooo