U-M Mobile App Publishing Frequently Asked Questions

What file formats are required for the security scan?
  • Android: aab/apk file
  • iOS: ipa file (this can be signed using your own certificate/profile and does not need to be university signed)
Is a Privacy Policy required?

Yes, it is required for both App Store Connect and Google Play. If you do not have one, you may use this template approved by OGC.
Note: It must be hosted online, the storefronts require the URL.

What signing certificate do I use?

For App Store Connect: Either create a cloud managed certificate in your XCode, or ask ITS to share the U-M Signing Certificate. Do not manually create a signing certificate or key under the UM Developer account!

For Google Play: The developer will use own signing key.

Can I get API Access to publish apps?

If using a UM Developer account, you can be granted API Access for App Store Connect.

If using a third party developer, API Access will not be granted as it will give you access to all mobile apps under the developer account. Additionally, Google Play has documentation against this.

What are the different ways to beta test?

Please refer to the following resources from Apple and Google:

Can my app be unlisted in App Store Connect?

Yes. More information is available in Unlisted App Distribution.

What if my app is rejected?

App Store Connect: Message directly with the App Review Team to troubleshoot and resolve the issue(s) with your developer.

Google Play: Submit a support ticket with Google if you need more assistance beyond the resources they provide on the issue(s).

What are some helpful tips to ensure my app does not get rejected?
  • Ensure your app is accessible for testing for the App Review Team!  At any point, does your app require a code or set of credentials to access it? If yes, then please provide that information below.
  • Are there intricate steps to follow for navigating your app? If yes, please include those instructions in the “Message to App Review Team” textbox below.
  • Do you have an IRB Approval or Exemption letter? If yes, please provide a copy so it can be uploaded for the App Review Teams to review.
  • Consider providing additional background of your mobile app to ensure the App Review Team has a thorough understanding of the purpose of your app. For example, this is a research study with a target audience of x, y, z… the user will use this app for <insert function> which is intended to monitor a, b, c…