ID Verification Device Assistant compliance guide
When using the ID Verification Device Assistant software development kit (SDK), app operators must clearly disclose the privacy policy to end users, configure system permissions appropriately, and call relevant interfaces only after an end user agrees to the privacy policy and uses a feature. This ensures that personal information collection is compliant and necessary.
Sample SDK privacy policy disclosure
App operators must clearly inform end users about how the ID Verification Device Assistant SDK processes personal information. This disclosure must include the SDK name, business features, the purpose of data processing, the types of information collected, and a link to the privacy policy. Your app must have a separate privacy policy that informs users that you use the ID Verification Device Assistant SDK.
For example, include the following information in your app's third-party sharing checklist:
SDK name: ID Verification Device Assistant SDK
Business feature: [Secure the environment for face-based authentication]
Types of personal information collected: Fill this in based on your information collection configuration.
Permissions used: Fill this in based on your permission configuration.
Privacy policy link: [link]
SDK system permission requests
The permissions required by the SDK vary depending on the business scenario. For more information, see the following tables.
Android application permissions list
Permission | Required | Purpose | Solution |
android.permission.INTERNET | Yes | Network permission. The SDK requires an internet connection to function. | Device Assistant solution |
android.permission.ACCESS_NETWORK_STATE | Yes | Used to get device network status information. | Device Assistant solution |
android.permission.WRITE_EXTERNAL_STORAGE | No (Recommended) | Used to detect abnormal devices. | These permissions must be dynamically requested on systems running Android 6.0 or later. Note If you want to enable these permissions, ensure that your app is granted the permissions before you integrate the SDK and call the initWithOptions initialization interface. |
android.permission.READ_EXTERNAL_STORAGE | No (Recommended) | Used to detect abnormal devices. |
iOS application permissions list
Permission | Required | Purpose | Solution |
NSLocalNetworkUsageDescription | No (Recommended) | Used to get device network status information. | Device Assistant solution |
Harmony permissions
Permission | Required | Description | Solution |
ohos.permission.INTERNET | Yes | Network permission. The SDK requires an internet connection to function. | Device Assistant solution |
ohos.permission.GET_NETWORK_INFO | Yes | Used to get device network status information. | Device Assistant solution |
ohos.permission.STORE_PERSISTENT_DATA | No (Recommended) | Used to detect abnormal devices. | Device Assistant solution |
Optional personal information configuration
Not collecting personal information affects some product features. Configure the settings based on your business needs.
Android configuration method
To avoid collecting optional personal information, do not request the recommended permissions or disable the settings.
Configuration method | Description | Personal information field |
Do not request the recommended permission android.permission.READ_PHONE_STATE | Network information | Information such as network information and device communication status. |
Do not request the recommended permission android.permission.WRITE_EXTERNAL_STORAGE | Storage information | Information such as device fingerprint. |
Do not request the recommended permission android.permission.READ_EXTERNAL_STORAGE | Storage information | Information such as device fingerprint. |
DataType configuration field NO_EXTRA_DEVICE_DATA | Application information | List of fraud apps, local area network IP, and DNS IP. |
iOS configuration method
To avoid collecting optional personal information, do not request the recommended permissions.
Configuration method | Description | Personal information field |
Do not request the recommended permission NSLocalNetworkUsageDescription | Network information | Network-related information such as network type, local area network IP, DNS, IP, and other network information |
Harmony configuration method
To avoid collecting optional personal information, do not request the recommended permissions.
Configuration method | Description | Personal information field |
Do not request the recommended permission ohos.permission.STORE_PERSISTENT_DATA | Storage information | Information such as device fingerprint. |
When to initialize the SDK and call business features
When an end user launches the app for the first time, call the relevant interfaces only after the end user agrees to your app's privacy policy and uses a feature that this SDK provides. In ID Verification scenarios, call the `getMetaInfos` (collect information) and `verify` (start verification) interfaces to avoid excessive or premature data collection. The information collection interface configuration document lists the data that is collected. For more information, see the Development Reference.