A client, a large pharmaceutical company, asked me to remove everything that could potentially violate the GDPR from their Android / IOS app. Apple rejected the update despite me stating the reason for the update, because the app could have been a website instead. Some of the functionality I had to remove was mobile specific, like reading measurements from a medical device etc.