Our app was rejected, after being in the App Store for more than a year, for requesting personal data from users and then uploading it to our servers without notifying users.
This was the rejection notice "To collect personal data with your app, you must make it clear to the user that their personal data will be uploaded to your server and you must obtain the user's consent before the data is uploaded."
Does anyone know if this permission (a permission asking the user whether or not they consent to their personal data being collected) is required if we decide to store the data locally instead of uploading it to our servers? We don't want to scare users with a messag, especially since we're collecting data that is not really even that "personal".