Presumably they have a transparent proxy/cache. This is not unusual for large corporate environments - or indeed whole countries. Typically they install additional SSL root certs on the corporate devices so that they trust the proxy, which impersonates your server. How exactly is the SSL failing? Are you doing your networking? Do you have some additional checking or non-default SSL settings?

"SpyBuster performs data analysis using standard AppStore API provided by Apple." That's surprising, if true. I guess there is a StoreKit API that can be abused, or something. My previous guess was that it was able to explore the filesystem to discover other installed apps. In any case, I don't believe the app should be on the store. I did wonder if it would disappear after this thread was posted, but it hasn't. App Review should be embarrassed. Do you think its anti-Russian theme might have some bearing on why it has been accepted? Would I get approved if I created a similar app that claimed to identify apps created in the USA?

Previous thread about this app: https://developer.apple.com/forums/thread/760623

My recollection from a few years ago is that calling this from the wrong sort of extension doesn’t work on iOS, i.e. it does nothing or there is a run-time error or something. Does it actually work for you? You can find code that achieves this in some indirect way, i.e. by traversing the view hierarchy to find some object with a “normal” openURL method. This could result in app review issues - if they discovered it. There are apps on the store that do this.

They are supposed to be only the screen with no bezel or similar. That's why they are required to be specific sizes. In practice, lots of apps seem to include other content yet get approved.

No. What do you mean by "associate subscriptions with specific users"? When your app calls StoreKit APIs, it only ever gets information about the user whose device it is running on. You don't need to do anything to "match" users - unless you are providing some sort of outside-the-app payment process.

Would combining GPS with other location technologies (like Wi-Fi or Bluetooth) reduce drifting effectively? The values you get from Core Location have already been merged in this way. I think the answer to your question is basically "no".

If the rejection mentions the app metadata, you need to put a link in the app description in App Store Connect.

There is a whole long section about Canada in section 3 of exhibit B to schedule 2 of the paid apps agreement. I don’t understand it all, but this looks relevent: (c) If You are registered for GST/HST purposes, You, by executing Schedule 2 and Schedule 3, (i) agree to enter into the election pursuant to subsection 177(1.1) of the ETA to have Apple Canada collect, account for and remit GST/HST on sales of Licensed Applications and Custom Applications made to End-Users in Canada on Your behalf and have completed (including entering its valid GST/HST registration number), signed and returned to Apple Canada Form GST506 (accessible on the App Store Connect site); and (ii) acknowledge that Apple will deduct from your remittance the applicable Canadian GST/HST and QST, based on Your address in Canada, on the commission payable by You to Apple. Note the very last bit about “the commission payable by You to Apple”.

I think your accountant is wrong, but I’m far from certain as I am not familiar with Canadian tax accounting. I’d say that Apple’s commission isn’t your business expense. You haven’t paid that sales tax, so you can’t reclaim it. Compare with physical goods. Say you made widgets and sold them to a retailer, who added their markup and sold them on to end users. The end users pay sales tax on the retail price including the retailer’s markup. Would you expect to be able to reclaim that sales tax? I don’t think it makes sense to do that.

What country are you in? My guess is that your accountant is wrong.

No I am not, I'm simply living in the UK currently I guess what I really meant by "UK taxpayer" was something like "Resident in the UK for tax purposes", which probably means "living in the UK for 6 months or more in any year". Or something. I.e. would you expect to declare the income that you get from Apple to HMRC, or to some other country's tax authority? Your circumstances may be sufficiently complex that you need to get professional advice, quite apart from working out how to describe it to Apple. Regarding the W8BEN, could you post a screenshot of what it actually asks you to declare? Mine says this: I certify that (check all that apply) The beneficial owner is a resident of United Kingdom within the meaning of the income tax treaty between United States and that country or region. I.e. resident for tax purposes, not citizen. Is yours different?

Are you a UK taxpayer?

It's only opt-in users. But you can see the % who have opted in, so you can extrapolate to the total number of sessions if you want. (What does "MAU" mean?)

Has anyone faced a similar situation? Yes, if you search the forum you’ll find plenty of similar messages. I don’t recall anyone ever reporting that they were able to save their account from termination. The lesson for all of us is, don’t rely 100% on Apple to pay your bills. Make sure you have a second source of income, and don’t learn only Apple-specific skills.