VRC.Quest.Security.2

• Display an informative on-screen prompt explaining that certain features will be unavailable until the permission is accepted, or
• Continue functioning without interruption, even if some features are limited.

1. Review the permissions declared in the Android manifest. (See Determining Permissions Used By Your App.)
2. Verify that the app uses every permission it declares.
3. Verify that none of the declared permissions are prohibited.
4. For each review-requiring permission, verify that Meta has been provided a valid justification for its use.
5. Graceful failure test: For each permission that prompts the user at runtime, launch the app and deny the permission when prompted. Verify that the app does not crash or become permanently unresponsive.

• The app has a functional use for every permission declared.
• The app doesn’t declare any prohibited permissions.
• Each review-requiring permission has a valid justification explaining why it is necessary.
• When a user denies a runtime permission, the app either:
  • Displays an informative on-screen prompt explaining that certain features will be unavailable, or
  • Continues functioning without interruption (some features may be limited).

• 2026-03-30: Added review-requiring permission justification checks and graceful failure testing for denied runtime permissions.
• 2024-12-18: Moved the lists of prohibited and review-required permissions to their own reference pages.
• 2024-07-31: Removed App Lab from VRC platform requirements.