How to Get Your App Approved on the App Store and Google Play — First Try
App Store rejection does not just cost you a few days. It costs you the launch momentum you spent months building, and it often surfaces in the week your marketing campaign was supposed to go live. The good news is that the vast majority of rejections are preventable. Apple and Google reject apps for the same categories of issues every time — performance failures, privacy declaration mismatches, missing demo credentials, and metadata that does not match the actual build.
This is the checklist our team runs before every client submission. Work through it before you hit submit, and your odds of getting through on the first try improve significantly.
Why Apps Get Rejected — The Actual Numbers
App store rejection rates remain high across both platforms. [VERIFY: roughly 1 in 4 submissions encounters some form of rejection or required revision before approval.] The reasons are consistent enough to plan around.
On the Apple App Store, the leading rejection category is App Completeness — crashes, broken links, placeholder content left in the build, or features described in the metadata that do not exist in the submitted version. This single category accounts for more rejections than Legal, Design, Business, and Safety categories combined.
On Google Play, the leading issue is a mismatch between what your Data Safety declaration says your app collects and what it actually collects — including data collected by third-party SDKs you integrated without fully auditing. Many teams declare their own first-party data accurately and miss the SDK-level collection entirely.
Understanding which category you are most at risk for is the first step to avoiding it.
Apple App Store vs Google Play: How the Review Processes Differ
The two stores work differently, and your submission strategy should account for both.
| Dimension | Apple App Store | Google Play |
|---|---|---|
| Review type | Human review on every submission | Automated (AI-driven), manual for flagged apps |
| Typical review time | 24–72 hours | A few hours |
| Developer account fee | Rs. 8,300 per year (approx. $99) | Rs. 2,100 one-time (approx. $25) |
| Primary focus areas | Design adherence, privacy accuracy, functionality | Data safety declarations, technical compliance, API level |
| Rejection appeal | Formal appeal process via App Store Connect | Policy response through Play Console |
| New account restrictions | Standard process | Closed testing (20 testers, 14 days) before production access |
The human review on Apple means a reviewer will actually open your app and try to use it. That reviewer will notice if a tab crashes, if a demo account does not work, or if the screenshots show a feature that is not in the build. Google's automated review catches policy violations and technical mismatches — but when a human review is triggered (which happens on accounts with policy flags or sensitive content categories), the scrutiny is equally thorough.
Pre-Submission Checklist: Build Quality and Functionality
These are the things Apple's reviewer will do within the first two minutes of opening your app. Any failure here means an immediate rejection under App Completeness (Guideline 2.1).
Test on real devices, not just simulators. Run the release build on at minimum three physical devices: a current-generation iPhone or Android device, a one-generation-old mid-range device, and the oldest OS version your app claims to support. Simulators do not surface memory pressure bugs, real GPU rendering issues, or hardware-specific crashes.
Audit every navigation path to completion. Every button should do something. Every form should submit. Every link — including the support URL and privacy policy URL you paste into App Store Connect — should load a working page. Apple's reviewers click links. A broken support URL is a rejection.
Remove all placeholder content from the production build. Lorem ipsum text in a profile screen, a test payment card in the checkout flow, or a "Coming Soon" banner on a core feature will get your app rejected. The submitted build must represent the product as it will actually function for users.
Provide complete demo credentials in the Review Notes. If your app requires login, give the reviewer a working username, password, and any 2FA codes they need. If 2FA involves a phone number that changes, explain how to bypass it. Reviewers who cannot access the core functionality of your app will reject it, not guess their way through it.
We handle the complete submission process for every mobile app we ship — not just the development. See how our end-to-end mobile service works, from first sprint to both stores live.
Pre-Submission Checklist: Privacy and Data Declarations
Privacy failures are the second-leading rejection category on both platforms in 2026, and they are almost entirely preventable with a proper SDK audit.
Audit every third-party SDK for data collection. Every analytics library, advertising SDK, crash reporter, and payment integration collects data. That data must be disclosed in Apple's Privacy Nutrition Labels and Google's Data Safety form. Go through your dependency list one library at a time and check each SDK's documented data practices against what you have declared. The mismatch between SDK-level collection and developer declarations is the single most common data privacy rejection cause on both stores.
Complete Apple's Privacy Nutrition Label accurately. This appears on your App Store listing and declares exactly what data your app collects, links to users or devices, and uses for tracking. Categories include: Contact Info, Health & Fitness, Financial Info, Location, Identifiers, Usage Data, Diagnostics, and others. If you collect it, it must be declared. If you declare you do not collect something but an SDK does, the discrepancy will surface.
Complete Google's Data Safety section. The questions cover what data you collect, whether it is shared with third parties, whether users can request deletion, and whether data is encrypted in transit. The answers must match your actual implementation and your Privacy Policy exactly.
Implement App Tracking Transparency on iOS correctly. If your app uses data for advertising or tracking across other companies' apps, you must present the ATT permission prompt before accessing IDFA. The prompt must appear before any tracking occurs — not after you have already collected identifiable data.
Disclose AI-generated content if present. Both Apple and Google introduced explicit AI disclosure requirements in 2025–2026. If your app generates content using AI — images, text, recommendations — you must disclose this clearly to users. Failure to disclose is a policy violation on both platforms.
Pre-Submission Checklist: Metadata and Store Listing
Metadata rejections are the most frustrating because they are easy to avoid and happen late in the process, after the build is ready.
Screenshots must match the current build. Apple's reviewers compare screenshots to the actual app experience. If your screenshots show a feature from an earlier version that you removed, or a UI that changed significantly, the mismatch triggers a rejection. Update screenshots every time you make a significant UI change.
App name and subtitle must not use competitor trademarks or misleading terms. "Better than WhatsApp" is not a valid subtitle. Neither is including a competitor's name to capture search traffic. Apple will reject on this, and Google's automated systems flag it.
App description must accurately reflect what the app does. Claiming features that do not exist in the submitted build is a rejection under App Completeness on Apple and a policy violation on Google. The description you write will be compared to the app the reviewer experiences.
Keywords (iOS) and short description (Android) must not include prohibited terms. Apple's keyword field does not allow your own app name, competitor names, or terms that violate content guidelines. Google's short description has similar restrictions.
Google Play-Specific Requirements for 2026
Google introduced several requirements in recent updates that catch first-time submitters who researched against older documentation.
New personal developer accounts must complete closed testing first. If you created your personal Google Play developer account after November 2023, you must run a closed test with at least 20 testers for a minimum of 14 continuous days before applying for production access. This is not optional and it cannot be shortened — plan it into your launch timeline.
Your app must target the current required API level. As of 2026, new app submissions must target API level 35 or higher. Apps targeting lower API levels will be rejected. Check your targetSdkVersion in your build configuration before submitting.
Submit as an Android App Bundle (.aab), not an APK. Google has required the .aab format for new app submissions for several years. Submitting an .apk directly to the Play Store will be rejected at the technical review stage.
What Happens When You Get Rejected
A rejection is not a ban. On both platforms, rejections are usually specific, actionable, and resolvable within 24–72 hours if you respond correctly.
When Apple rejects your app, you receive a message in App Store Connect citing the specific guideline your app violated. Read it carefully — the guideline number matters. Guideline 2.1 (App Completeness) requires you to fix the functional issue and resubmit. Guideline 5.1 (Privacy) requires you to update your declarations and potentially your app's actual behaviour. Some rejections allow you to appeal directly; others require you to fix and resubmit.
When Google rejects your app or suspends it post-approval, you receive a notification in the Play Console with the policy violation cited. You can submit a policy response explaining your compliance, provide supporting documentation, and appeal. If the rejection is technical (API level, bundle format), fix it and resubmit without an appeal — it is faster.
The teams that lose weeks on rejections are the ones who argue with the decision rather than reading it carefully, fixing the cited issue, and resubmitting with documentation of what changed.
Frequently Asked Questions
How long does App Store review actually take in 2026?
Apple's review takes 24–72 hours for most submissions. Submissions that trigger additional scrutiny — apps in sensitive categories like healthcare, finance, or children's content, or apps from accounts with prior policy violations — can take longer. Google Play's automated review typically completes within a few hours, though manual review (triggered by content flags or new account status) takes 3–7 days. Build your launch timeline with a one-week buffer for store review.
Can I submit to both stores at the same time?
Yes, and we recommend it. Develop your build, complete both store listings simultaneously, and submit to both on the same day. The stores operate independently and review times vary — submitting in parallel means whichever store approves first, you have something to launch with while the other completes its review.
What is the single most common reason apps get rejected on first submission?
App Completeness on Apple (Guideline 2.1) — specifically, submitting a build with a crash, a broken link, or a missing demo account. On Google Play, it is a Data Safety form that does not match what the app and its SDKs actually collect. Both are preventable with a pre-submission checklist reviewed by the engineering team, not just the product team.
Do I need a privacy policy to submit an app?
Yes, unconditionally. Both Apple and Google require a valid, publicly accessible privacy policy URL for any app that collects any user data — which includes virtually every app with user accounts, analytics, or crash reporting. The policy must be accurate, must match your Data Safety and Privacy Nutrition Label declarations, and must be hosted at a URL that loads reliably on Apple's review systems.
What happens if my app is approved and then later removed?
Post-approval removals happen when Google's automated systems flag a policy violation in a live app, when a user report triggers a manual review, or when you fail to update your app to meet new API or policy requirements by a published deadline. The resolution process is the same as for rejections: read the specific policy cited, address the issue, and resubmit or appeal with documentation. Apps are rarely permanently removed on a first violation unless the content itself violates safety or legal requirements.
Getting an app through both stores on the first try requires the same discipline that makes the build itself solid: attention to detail, testing against real conditions, and not cutting corners on documentation. If you want a team that has done this across multiple live productions — including apps currently rated 4.8 on both stores — start a conversation with StartupSphare. We handle development and launch as a single, accountable process.
Mobile App Development · UI/UX Design · Success Stories · Contact Author: Abdul Rahaman Last updated: August 2026