On-Device Website Filtering Without VPN/Root Certificates

Hi everyone,

Our app helps users block adult websites to promote focus and digital wellness. During the App Store review, it was flagged under Guideline 2.5.1 for using a VPN profile to block content, with Apple advising us to remove this feature.

Since blocking adult content is core to our app, we’re looking for compliant alternatives:

Can Network Extensions Framework (e.g., NEDNSProxyProvider) be used for on-device filtering? Would pre-configured safe DNS (e.g., CleanBrowsing) be acceptable? Are there compliant examples of similar apps? Any advice on achieving this functionality within Apple’s guidelines would be greatly appreciated.

Thanks!

Answered by DTS Engineer in 815028022
Can … NEDNSProxyProvider … be used for on-device filtering?

Yes. Although you’d usually use a content filter for this.

But, and this is a big but, both of these providers have significant deployment restrictions. See TN3134 Network Extension provider deployment for the details.

Would pre-configured safe DNS (e.g., CleanBrowsing) be acceptable? Are there compliant examples of similar apps?

I don’t work for App Review and can’t comment on their policies. If, after reading TN3134, you decide to start down this path, I recommend that you raise this with App Review directly.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Can … NEDNSProxyProvider … be used for on-device filtering?

Yes. Although you’d usually use a content filter for this.

But, and this is a big but, both of these providers have significant deployment restrictions. See TN3134 Network Extension provider deployment for the details.

Would pre-configured safe DNS (e.g., CleanBrowsing) be acceptable? Are there compliant examples of similar apps?

I don’t work for App Review and can’t comment on their policies. If, after reading TN3134, you decide to start down this path, I recommend that you raise this with App Review directly.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

On-Device Website Filtering Without VPN/Root Certificates
 
 
Q