Apple updated its App Review Guidelines to require developers to clearly disclose when personal data will be shared with third-party AI and to obtain explicit permission before doing so. The change sounds like legal hygiene, but it names a new route for ordinary information. A photo app, health tracker, writing tool, shopping service, or workplace platform can now sit between the user and an outside model that receives material the user may have treated as local, temporary, or routine. The rule does not ban that transfer. It forces the request to appear before the data moves.

The permission box becomes a small border crossing. A user is asked to decide, often in a hurry, whether a private action inside one app can become input for another company's system. The friction is useful because AI integrations often arrive as convenience, summarization, automation, or personalization. Those words can hide the path taken by contacts, files, voice, location, habits, and fragments of work. Apple's rule shifts part of the burden back to the interface. The app has to ask in visible language before the assistant behind it learns from someone else's data.