Guideline 5.4
VPN app not from registered entity or misusing NEVPNManager
VPN apps must be from registered organizations with VPN capabilities, cannot sell user data, and must use NEVPNManager API.
11 cases reported · ~19 days to resolve · 67% appeal success
Apple's rejection message
Guideline 5.4 - Legal - VPN Apps: Your VPN app uses the NEVPNManager API but does not meet the requirements for VPN apps on the App Store.
How to fix this
Ensure VPN app meets all requirements
mediumWorked for 70%
Publish from an organization account (not individual). Use NEVPNManager API only. Include a clear privacy policy. Don't sell or share user data. Explain the VPN's purpose in App Review notes.