.Net iOS Privacy Manifest issue

[kbc091189]

Recently we submitted our app to Apple App store for review and it is rejected for the following reasons

ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FBLPromises.framework/FBLPromises”, which includes FBLPromises, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCoreDiagnostics.framework/FirebaseCoreDiagnostics”, which includes FirebaseCoreDiagnostics, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GoogleDataTransport.framework/GoogleDataTransport”, which includes GoogleDataTransport, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.

This is our current Privacy Manifest file

`

NSPrivacyTracking

<key>NSPrivacyTrackingDomains</key>
<array/>

<key>NSPrivacyAccessedAPITypes</key>
<array>
    <dict>
        <key>NSPrivacyAccessedAPIType</key>
        <string>NSPrivacyAccessedAPICategoryFileTimestamp</string>
        <key>NSPrivacyAccessedAPITypeReasons</key>
        <array>
            <string>C617.1</string>
        </array>
    </dict>
    <dict>
        <key>NSPrivacyAccessedAPIType</key>
        <string>NSPrivacyAccessedAPICategorySystemBootTime</string>
        <key>NSPrivacyAccessedAPITypeReasons</key>
        <array>
            <string>35F9.1</string>
        </array>
    </dict>
    <dict>
        <key>NSPrivacyAccessedAPIType</key>
        <string>NSPrivacyAccessedAPICategoryDiskSpace</string>
        <key>NSPrivacyAccessedAPITypeReasons</key>
        <array>
            <string>E174.1</string>
        </array>
    </dict>
    <dict>
        <key>NSPrivacyAccessedAPIType</key>
        <string>NSPrivacyAccessedAPICategoryUserDefaults</string>
        <key>NSPrivacyAccessedAPITypeReasons</key>
        <array>
            <string>CA92.1</string>
        </array>
    </dict>
</array>

<key>NSPrivacyCollectedDataTypes</key>
<array/>

`

I am not sure what else needs to be added in the privacy manifest file ? We tried adding different keys into above manifest file and still getting the same error email from Apple. Can anyone let me know on what exactly needs to be added ?

Update: On futher research it looks like privacy manifest file is missing this repo. can we open a PR for the same ?

[AdamEssenmacher]

What version of AdamE.Firebase.iOS.Core are you using?

[kbc091189]

@AdamEssenmacher : We are using "BarcodeScanner.Mobile" which is dependent on "AdamE.MLKit.iOS.BarcodeScanning".

[AdamEssenmacher]

Can you share your .csproj?

[kbc091189]

@AdamEssenmacher : Here it is

<PropertyGroup>
	<TargetFrameworks>net9.0;net9.0-android;net9.0-ios;</TargetFrameworks>
	<!-- Uncomment to also build the tizen app. You will need to install tizen by following this: https://github.com/Samsung/Tizen.NET -->
	<!-- <TargetFrameworks>$(TargetFrameworks);net6.0-tizen</TargetFrameworks> -->
	<UseMaui>true</UseMaui>
	<MauiVersion>9.0.50</MauiVersion>
	<SingleProject>true</SingleProject>
	<ImplicitUsings>enable</ImplicitUsings>
	<SupportedOSPlatformVersion Condition="$([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'ios'">14.0</SupportedOSPlatformVersion>
	<SupportedOSPlatformVersion Condition="$([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'android'">21.0</SupportedOSPlatformVersion>

	<!--Assembly and Namespace info -->
	<id>BarcodeScanner.Mobile.Maui</id>
	<AssemblyName>BarcodeScanner.Mobile.Maui</AssemblyName>
	<RootNamespace>BarcodeScanner.Mobile.Maui</RootNamespace>

	<Product></Product>
	<AssemblyVersion>9.0.0.2</AssemblyVersion>
	<AssemblyFileVersion>9.0.0.2</AssemblyFileVersion>
	<Version>9.0.0.2</Version>
	<NeutralLanguage>en</NeutralLanguage>

	<!--Version of C# to use -->
	<LangVersion>default</LangVersion>
	<GeneratePackageOnBuild>true</GeneratePackageOnBuild>
	<Authors>Jimmy Pun, Anton Yaroshenko</Authors>
	<Description>Powerful MAUI barcode scanning library using GoogleVision API for Android and iOS.</Description>
	<RepositoryUrl>https://github.com/JimmyPun610/BarcodeScanner.Mobile</RepositoryUrl>
	<PackageProjectUrl>https://github.com/JimmyPun610/BarcodeScanner.Mobile</PackageProjectUrl>
	<PackageLicense>https://github.com/JimmyPun610/BarcodeScanner.Mobile</PackageLicense>
	<RepositoryType></RepositoryType>
	<PackageTags>MAUI Barcode Scanning Tools</PackageTags>
	<PackageReleaseNotes></PackageReleaseNotes>
	<Copyright>Copyright 2025</Copyright>
	<PackOnBuild>true</PackOnBuild>
	<PackageReadmeFile>README.md</PackageReadmeFile>
	<PackageVersion>9.0.0.2</PackageVersion>
</PropertyGroup>

<!-- Going to use latest version library in MAUI -->
<ItemGroup Condition="( '$(TargetFramework)' == 'net9.0-android' )">
	<PackageReference Include="Xamarin.AndroidX.Collection" Version="1.4.5.2" />
	<PackageReference Include="Xamarin.AndroidX.Collection.Jvm" Version="1.4.5.2" />
	<PackageReference Include="Xamarin.AndroidX.Collection.Ktx" Version="1.4.5.2" />
	<PackageReference Include="Xamarin.AndroidX.Camera.Camera2" Version="1.4.1.1">
	</PackageReference>
	<PackageReference Include="Xamarin.AndroidX.Camera.Lifecycle" Version="1.4.1.1">
	</PackageReference>
	<PackageReference Include="Xamarin.AndroidX.Camera.View" Version="1.4.1.1">
	</PackageReference>
    <PackageReference Include="Xamarin.Google.MLKit.Common" Version="118.11.0.2" />
	<PackageReference Include="Xamarin.Google.MLKit.Vision.Common" Version="117.3.0.13" />
	<PackageReference Include="Xamarin.Google.MLKit.BarcodeScanning" Version="117.3.0.2">
	</PackageReference>
	<PackageReference Include="Xamarin.GooglePlayServices.MLKit.Text.Recognition" Version="119.0.1.2">			
	</PackageReference>
</ItemGroup>

<ItemGroup Condition="( '$(TargetFramework)' == 'net9.0-ios' )">
	<PackageReference Include="System.Numerics.Vectors" Version="4.6.0" />
	<PackageReference Include="AdamE.MLKit.iOS.BarcodeScanning" Version="6.0.0" />
	<BundleResource Include="Platforms\iOS\PrivacyInfo.xcprivacy" LogicalName="PrivacyInfo.xcprivacy" />
</ItemGroup>
<ItemGroup>
	<!-- We will compile anything ending in .shared.cs  You can change this -->
	<PackageReference Include="Xamarin.Build.Download" Version="0.11.4" />
</ItemGroup>

<ItemGroup>
  <Compile Update="Platforms\Android\BarcodeAnalyzer.cs">
    <ExcludeFromCurrentConfiguration>false</ExcludeFromCurrentConfiguration>
  </Compile>
  <Compile Update="Platforms\Android\CameraViewHandler.android.cs">
    <ExcludeFromCurrentConfiguration>false</ExcludeFromCurrentConfiguration>
  </Compile>
  <Compile Update="Platforms\Android\TaskCompleteListener.cs">
    <ExcludeFromCurrentConfiguration>false</ExcludeFromCurrentConfiguration>
  </Compile>
  <Compile Update="Platforms\Android\TorchStateObserver.cs">
    <ExcludeFromCurrentConfiguration>false</ExcludeFromCurrentConfiguration>
  </Compile>
	<None Include="..\README.md" Pack="true" PackagePath="\" />
</ItemGroup>

<ItemGroup>
	<PackageReference Include="Microsoft.Maui.Controls" Version="$(MauiVersion)" />
	<PackageReference Include="Microsoft.Maui.Controls.Compatibility" Version="$(MauiVersion)" />
</ItemGroup>

[AdamEssenmacher]

This is strange. If you check your nuget cache, you should find a directory named adame.google.ios.promisesobjc. Look under /lib/net6.0-ios16.1/Google.PromisesObjC.resources/ios-arm64/FBLPromises.framework and you should see the privacy bundle right there.

This same package is a dependency of AdamE.Firebase.iOS.Core and nobody else has reported an issue from the app store.

Also, I'm wondering how you could have picked up FirebaseCoreDiagnostics? It isn't a dependency of AdamE.MLKit.iOS.BarcodeScanning or anything else I see in your package references.