App Intents and Siri Shortcuts review checklist

Choose actions with clear user intent

Good intents map to actions users already understand: log a workout, create a task, start a timer, order a saved item, open a document, send a status, or retrieve a summary. Weak intents expose internal operations or require too much hidden context.

Write the action name, required parameters, optional parameters, side effects, and expected result. If the action could spend money, share data, delete content, or contact another person, it needs stronger confirmation and review evidence.

Make parameters and entities stable

• Entity names should be recognizable and not leak private data in suggestions.
• Defaults should not perform surprising actions for the wrong account or workspace.
• Deleted, renamed, unavailable, and permission-restricted entities need clear errors.
• Localized phrases should match the app's actual feature names and supported languages.

Protect privacy outside the app UI

System surfaces may show phrases, entity names, summaries, and results in places where the full app's privacy controls are not obvious. Do not expose sensitive health, finance, child, location, message, or workplace data unless the user intentionally configured that action.

AppReviewReady interpretation: test intents with the device locked, another account active, permissions denied, and no recent data. A safe error is better than revealing stale or private information.

Verify action lifecycle

1. Run each shortcut from Shortcuts, Siri, Spotlight, and any relevant system surface.
2. Test missing parameters, invalid parameters, denied permissions, signed-out state, and network failure.
3. Confirm destructive or paid actions require confirmation where appropriate.
4. Verify the app opens to the matching detail screen when the user needs to continue.
5. Check that App Store metadata does not promise system integrations that are not included in the submitted build.

Document the intent contract

This contract helps QA, support, and Review Notes stay aligned as intents expand. It also prevents accidental exposure when a new App Entity becomes searchable or suggested by the system.

Revisit the contract after adding new shortcuts, widgets, Spotlight results, or Apple Intelligence integrations. A harmless in-app entity can become sensitive when it appears in suggestions or is spoken aloud by Siri.

For automations, verify repeat execution. An action that is safe once can become risky when a user schedules it, chains it with other shortcuts, or runs it from a locked device.

App Intent review contract:
Intent name: [action]
System surfaces: [Siri, Shortcuts]
Parameters: [required/optional]
Sensitive data shown: [none or fields]
Confirmation required: [yes/no]
Test phrase: [example]
Expected result: [observable behavior]