You know, my HIPAA training is out of date and it's possible that new legislation applies. One of the more aggravating parts of my insurance job was dealing with people who thought I wanted them to sign an authorization because the insurance company was a meanie face trying to screw them out of their money and I would explain "No, ma'am, we need this to comply with federal law. Please and thank you." and they would be all chagrined and get me the auth, at long last.
But I only see App Store guidelines cited, not federal legislation. So the odds are good that someone in the company has the power to overrule that.
Given the circumstances, it seems to me this would be an appropriate time for an executive to say "Yea, verily, fuck them there guidelines. Let this person do this thing."
And if they don't want to or can't do that, it would be a good time for someone to hand walk it through the process and get it hooked up post haste with whatever doohickey would make everyone all happy.