| This is a non-story. In most cases, there is no point asking for a phone number as 2FA if the user chooses Sign in with Apple (SIWA). SIWA requires access to the device. App credentials are usually persisted per device, so 2FA doesn't really help if your device is stolen as the attacker would have app access anyway (if they were able to unlock the device). Even for non-Apple-device sign ins such as on Android or Windows, SIWA requires device access to generate a password, which requires 2FA on the Apple account [1]. Uber is allowed to ask for a phone number because a driver legitimately may need to contact a customer to arrange pickup. But in this case, Apple does not think that this app requires a phone number, and is thus protecting the privacy of its customers. There are other issues I have with Apple's ecosystem/the App Store, but this is not one of them. EDIT: After posting this comment OP has written in another comment that their app requires a phone number to arrange delivery. This information was not in the original tweet. In that case, I think this is likely a misunderstanding between the App Store reviewers and OP about how the phone number would be used, and I would need to see further discussion between those two before declaring Apple a bully in this case. [1] https://support.apple.com/en-us/HT204397 |