When Apple requires it, and how it works
Under App Store guideline 4.8, apps that use another company's third-party or social login must also offer an equivalent private option, and Sign in with Apple qualifies. Apps that only use their own account system, or specific exceptions, may not need it.
For users it's one tap with Face ID or Touch ID. Apple returns a stable user identifier and, on first sign-in only, the name and an email, which can be a private relay address the user chose to share.
- Required when you offer Google, Facebook, or similar third-party sign-in
- Uses Face ID / Touch ID for a fast, passwordless flow
- Private Relay lets users hide their real email behind an Apple-provided address
- Name and email arrive only on the first authorization, so you must store them then
- Works across iOS, web, and Android with the right setup
Getting the implementation right
The common failures are avoidable: not saving the user's name on first sign-in, breaking when a private relay email is used, or mishandling account linking for people who signed up another way.
We wire it into your existing auth so Apple, email, and other providers all resolve to one account, and we handle token verification on your server so the flow is secure, not just convenient.
- Capture and store name and email on the first authorization callback
- Handle private relay addresses and forward email correctly if you send mail
- Verify the identity token and authorization code server-side
- Link Apple sign-in to existing accounts to avoid duplicates
- Support sign-out and account deletion, which Apple also requires for account-based apps
- Configure the App ID, Services ID, and keys in your Apple Developer account
More on ios apps
Frequently asked questions
Do we have to add Sign in with Apple?
If your app offers other third-party or social logins, generally yes, per guideline 4.8. If you only use your own email-and-password system, or you qualify for an exception, you may not. We'll confirm which applies to your app.
What happens if a user hides their email?
Apple gives you a private relay address that forwards to the user. Your app works normally; you just send to the relay address, and you must register your sending domains with Apple for email to deliver. We set that up.
Will this work on Android and the web too?
Yes. Sign in with Apple supports web and Android through Apple's JS and OAuth flows, so you can offer one identity across platforms. We'll integrate it wherever your users sign in.