privacy Shipped
What this lens looks for
Build privacy and security in from day one. Practice data minimization — collect only what is needed and prefer on-device processing. Require opt-in consent for non-essential data collection, and honor "deny" gracefully so the app remains functional. Store tokens and credentials in platform secure storage (Keychain, EncryptedSharedPreferences, DPAPI, HttpOnly cookies), never in plaintext. Never log personally identifiable information, even at debug level. Require HTTPS for all network communication. Sanitize all user input before display to prevent XSS and injection. Each spec should include a Privacy section documenting what data is collected and how it is stored. Apply the platform specifics: on Apple, support App Tracking Transparency, App Privacy Report, and Private Relay compatibility, and include NS*UsageDescription keys with human-readable explanations for every permission prompt; on Android, respect scoped storage, support per-app language preferences, honor permission denials gracefully, and show rationale dialogs before runtime permission requests; on the web, configure CSP to restrict script sources, use HttpOnly Secure cookies for auth tokens (never localStorage), sanitize input, enforce TLS, minimize third-party scripts, and respect Do Not Track; on C#/Windows, declare only required capabilities in Package.appxmanifest (avoiding broadFileSystemAccess unless essential), use DPAPI for local secrets, keep PII out of logs, and keep the app functional when optional data collection is denied.
What its verifier checks
Only data that is actually needed is collected, with on-device processing preferred where feasible; non-essential data collection is gated behind opt-in consent, and a working fallback path exists when the user denies; tokens and credentials use platform secure storage with no plaintext storage; no PII appears in logs at any level including debug; all network calls use HTTPS; user input is sanitized before display; a Privacy section documenting data collected and storage is present; platform-specific privacy controls are honored (Apple usage-description keys and tracking/privacy APIs; Android scoped storage and pre-request rationale; web CSP, HttpOnly cookies and Do Not Track; Windows minimal manifest capabilities and DPAPI).