5.1.2(i) AI Disclosure

The Nov 2025 rule that's the single most disruptive change for any RN app touching LLMs.

What 5.1.2(i) requires

For every third-party AI provider you call (OpenAI, Anthropic, Replicate, Gemini, AWS Bedrock, etc.):

1. Name the provider explicitly in privacy disclosures (Privacy Policy + Privacy Nutrition Label). Generic "we share data with service providers" is NOT enough.
2. Show explicit consent modal before the first network call to that provider. Modal must name the provider.

Exempt

• On-device inference (Apple Foundation Models, Core ML, on-device Whisper, llama.cpp)
• Run add-foundation-models to use the exempt path when possible

Sample consent modal copy

OpenAI

Use AI assistance?