Different web sites (e.g.) explain that the iOS permission model works like this: All apps have a set of basic permissions (including Internet access). If an additional permission is required during runtime the user is asked whether to grant or deny it.
Which permissions does iOS know? What belongs to the basic permissions set? What can be done without user consent? Basically I am looking for a list similar to this one, just for iOS
In contrast to other answers, there is an official list of permissions that are asked at runtime. It is in the iOS Security Guide (p. 73):
iOS helps prevent apps from accessing a user’s personal information without permission. Additionally, in Settings, users can see which apps they have permitted to access certain information, as well as grant or revoke any future access. This includes access to:
- Contacts
- Calendars
- Reminders
- Photos
- Motion activity and fitness
- Location Services
- Apple Music
- Your music and video activity
- Social media accounts, such as Twitter and Facebook
- Microphone
- Camera
- HomeKit
- Health
- Speech recognition
- Bluetooth sharing
- Your media library
If the user signs in to iCloud, apps are granted access by default to iCloud Drive. Users may control each app’s access under iCloud in Settings. Additionally, iOS provides restrictions that prevent data movement between apps and accounts installed by an MDM solution and those installed by the user.
Since iOS 10 it is required to provide a description for the requested permission. In the developer documentation of the frameworks you will see if such a description is required and accessing it's API will lead to an permission prompt (or crash if not description is given), e.g. see the hint in the developer documentation of the Contacts
framework:
Important
An iOS app linked on or after iOS 10.0 must include in its Info.plist
file the usage description keys for the types of data it needs to access or it will crash. To access Contacts data specifically, it must include NSContactsUsageDescription
.
Additionally, a good source of available permissions for each iOS/macOS version is in the Information Property List Key Reference (search for UsageDescription
contained in words).
All the keys you can add to your info.plist
file are listed in Apple documentation and described.
For most background modes you need to add a key in Info.plist to indicate that the app wants to run code while in the background.
But this information is not used to ask user permission, only for ensuring device compatibility.
Only some services require user permission (like Geolocation and Notifications services), which are automatically asked to the user the very first time your application attempt to use the corresponding API.
Anything that is within your sandbox you can do. So internet access and storing files are allowed by default but trying to talk to another app for example reading the camera roll or showing push notifications are not.
It seems that there is no official list available.
So far I found these permissions, where the bold ones are basic permissions:
- Internet access
- accessing Geolocation
- using notifications services (receiving and/or showing?)
- talking to other apps
- accessing camera
- accessing microphone
- accessing phone contact list
- accessing calendars
- accessing photos
- scheduling reminders