Android Developer Verification and the iOS 27 SDK: Your App's To-Do List Before 2027

Three platform rules will touch almost every business app in the next six months, and a fourth deadline passed on 1 November. None of them crashes your app. Each one can quietly stop new installs or block your next update.

If someone else built your app and you only hear from them when something breaks, this is the list to send them this week.

What changed for Android and iOS apps?

Google and Apple both set new rules for 2026–27. Here they are in date order:

1. Google Play target API 36 (now). New apps and updates must target Android 16 (API level 36). Extensions ran until 1 November 2026, so that window has closed.
2. Android developer verification (live in four countries; global in 2027). Apps on certified Android devices must be registered to a verified developer. Since 30 September 2026, it has been enforced in Brazil, Indonesia, Singapore and Thailand for installs from participating app stores, including Google Play.
3. iOS 27 SDK (April 2027). Apps uploaded to App Store Connect must be built with the iOS 27 SDK or later. Building with it requires the UIScene lifecycle.
4. iPhone Duo screenshots (April 2027). New submissions must include iPhone Duo screenshots.

If you also ship a Mac app outside the Mac App Store, there's one more: Apple's original Developer ID certificate authority expires on 1 February 2027.

What is Android developer verification, and does it affect my app?

Android developer verification is Google's requirement that every app installed on a certified Android device is registered to a developer whose identity Google has checked. It applies whether the app comes from Google Play or not.

If your app is on Google Play and uses Play App Signing, most of the work is done. Google says "Google Play automatically registers 99% of apps". Play Console is where you register the rest.

The apps most likely to be caught out are the ones outside Play. That includes an APK sent to dealers, a field-team app installed by hand, or a kiosk build. Those go through the new Android Developer Console:

• Verify your identity as an individual or an organization. Organizations also need a D-U-N-S number and a website verified through Google Search Console. Google warns that getting a D-U-N-S number "can take up to 28 days".
• Register each package name with the SHA-256 fingerprint of its signing key.
• Prove you own the key by uploading an APK signed with it.
• Pay the $25 one-time fee for a full-distribution account. Students and hobbyists can share apps with up to 20 devices without ID or a fee.

What happens if you skip it? In the countries where it's enforced, apps from developers who haven't completed these steps "will be unavailable for new installation on certified Android devices." Apps distributed through your organization's own store to managed devices don't need verification, but Google still recommends registering them.

Google says the requirement will expand globally "in 2027". It hasn't announced a month. Don't wait for one: identity checks and key proofs take longer than people expect, especially if nobody knows who holds the signing key. Google is blunt about that case: "If you lose your signing key you won't be able to register your packages."

What does the iOS 27 SDK requirement mean for my app?

From April 2027, you can't ship an iOS update unless it's built with the iOS 27 SDK. Apple's wording: "Starting April 2027, apps and games uploaded to App Store Connect need to meet the following minimum requirements: iOS and iPadOS apps must be built with the iOS 27 & iPadOS 27 SDK or later." Apple gives the month, not a day.

For many apps, this is a routine rebuild. For older UIKit apps, it isn't. Apple's technote on the scene-based lifecycle says: "In the next major release following iOS 26, UIScene lifecycle will be required when building with the latest SDK; otherwise, your app won't launch."

UIScene arrived with iOS 13 in 2019. Apps started before then, or never migrated, may still use the older app-delegate-only lifecycle. Moving to UIScene touches app start-up, deep links, push notification handling and state restoration. Plan a sprint and a full test pass for it, not a quick fix.

Cross-platform apps aren't exempt. React Native 0.88, released 19 October, added SceneDelegate support for this reason. Its release notes say UIKit apps built with Xcode 27 "will fail to launch" without it. If your app runs on an older React Native or Flutter version, upgrading the framework is part of the job.

iPhone Duo went on sale on 23 October. Apple asks developers to recompile with Xcode 27.1, and from April 2027 "any apps or games submitted will need to include screenshots for iPhone Duo". That means two new sizes: the outer display (1398×2034) and the inner display (2007×2853). (Apple's screenshot specifications page words the rule slightly differently: required for apps using the iOS 27.1 SDK or later. Either way, plan for it.)

What should an app owner do before 2027?

1. Confirm your next Android release targets API 36. Ask for the targetSdkVersion of the last build.
2. Check developer verification in Play Console. See which apps were registered automatically and register any that weren't.
3. List every APK distributed outside Google Play. Dealer apps, field-team apps, internal tools. Each one needs registering through the Android Developer Console.
4. Find out who holds your signing keys, and start your D-U-N-S number. If an agency that has since moved on holds the keys, sort that out first. Every other step depends on it.
5. Ask your iOS developer one question: "Do we use UIScene?" If not, schedule the migration for this quarter.
6. Build with Xcode 27 on a branch now. Fix warnings and framework upgrades while there's no deadline pressure.
7. Produce iPhone Duo screenshots for both displays, and update your store listings.
8. Ship the 2027-ready version in February or March. Not the last week of April, when there's no time left to fix a rejection.

Frequently asked questions

Is Android developer verification only for apps outside Google Play?

No. It covers all apps on certified Android devices. Google Play registers most Play apps automatically, so the extra work falls mostly on apps distributed outside Play.

When does Android developer verification go global?

In 2027. Google hasn't announced a month. It has been enforced in Brazil, Indonesia, Singapore and Thailand since 30 September 2026.

What is the exact date for the iOS 27 SDK requirement?

Apple says "Starting April 2027" and gives no day. Plan to have your rebuilt app approved before April begins.

Will my iOS app stop working in April 2027?

No. The rule applies to uploads, so the version already on the App Store stays available. But you can't ship any update, including a bug fix, until the app is built with the iOS 27 SDK.

Does my app need iPhone Duo screenshots?

Yes, for submissions from April 2027. Apple's screenshot specifications list two sizes: 1398×2034 for the outer display and 2007×2853 for the inner display.

How we approach it at Aavishkruti

Our mobile team builds and maintains native iOS (Swift), native Android (Kotlin), Flutter and React Native apps, including store submission. Most of the work in this list is unglamorous: finding keys, upgrading frameworks, retesting start-up and notifications. It's easier to do in November than in March. You can see what we build on our mobile app development page.

Not sure where your app stands? Book a free app audit. We'll tell you what needs work and what doesn't. Book a free audit →