Apple’s New App Store Rule 2.5.19 Bans Bait-and-Switch Apps Hiding AI Nudify Tools

Close-up of the App Store icon on an iPhone screen against a deep red wallpaper

Apple has rewritten its App Store rules to go after one of the platform’s ugliest problems: AI apps that secretly turn phones into deepfake factories. The company updated its App Review Guidelines on Friday, October 16, adding a new section 2.5.19 that bans hidden, dormant, or undocumented features — and explicitly naming nonconsensual intimate imagery as content apps must proactively prevent and remove.

The update lands amid a year of mounting embarrassment for Apple’s review process, and it reads less like routine policy housekeeping and more like a paper trail being built: after this, no developer can claim they didn’t know the rules.

The Three Rule Changes That Matter

First, Section 1.2 — the user-generated content rule — now covers apps that let users “create, generate, upload, share, or otherwise contribute” content, and names nonconsensual intimate imagery alongside IP infringement and anonymous bullying. AI content-creation apps are squarely in scope. Developers who fail to add safeguards, or fail to fix flagged violations after notice, “may be considered in violation of the Developer Code of Conduct” — a meaningful escalation from a simple app rejection, MacRumors reports.

Second, the brand-new section 2.5.19 targets the bait-and-switch: “Don’t include any hidden, dormant, or undocumented features in your app; your app’s functionality should be clear to end users and App Review. Attempting to hide undocumented features in your app binary, such as through code obfuscation or other methods, is grounds for removal of your app from the App Store and termination of your developer account.” A hidden-features ban already existed under section 2.3.1, but the new wording calls out code obfuscation directly and ties violations to developer-account termination, not just app removal.

Third, Section 5 now says apps facilitating human trafficking or the exploitation of children “will be removed from the App Store and blocked from alternative distribution” — extending the ban past Apple’s own store into the third-party app marketplaces Apple was forced to allow.

A Year of Embarrassment, Now in Writing

The timeline behind the update tells its own story. In January, the Tech Transparency Project identified dozens of AI “nudify” apps on the App Store. An April follow-up found App Store search suggestions and ads were actually steering users toward them. In July, San Francisco officials ordered Apple to remove eight apps capable of generating nonconsensual intimate imagery — and that same month, a 9to5Mac investigation found dozens of apps disguising gambling platforms as simple games and utilities, many reachable by children, that revealed hidden betting operations to users on Brazilian IP addresses.

Then came the Grok episode. Users found xAI’s chatbot could generate nonconsensual sexualized images of women and minors, lawmakers and advocacy groups demanded its removal, and Apple privately warned xAI that Grok could be pulled unless the company addressed the problem. xAI added safeguards, and Apple approved the updated app.

Why This Matters

Here is the thing the straight rule-recaps miss: every one of these cases was handled ad hoc — a private warning here, a city-ordered removal there. The new language turns that improvisation into a written standard, which changes the leverage. A safeguards notice is no longer a negotiation; failing to remediate is now a Code of Conduct violation, and the 2.5.19 termination threat means one bait-and-switch app can cost a developer their entire Apple developer presence.

The harder question is enforcement at scale. A written rule is only as good as the review capacity behind it — and the July gambling-app episode showed reviewers missing code that behaved differently by geography. Whether the new rules shrink the nudify-app problem or just push it toward alternative distribution and the web will be the real test.

Meanwhile in Apps & Tools: Apple is tightening control on the developer side too — see how Android’s developer verification enforcement compares, and check our look at apps optimized for the iPhone Duo’s App Store.

Written by
Daniel covers apps, software, and productivity tools — from AI-powered apps and major platform updates to the tools teams actually use to get work done.