You can select and access any file in your app's bundle directory, app's Documents directory, maybe a cache and tmp directory as well. Reading files outside the app's sandbox and other locations that don't have a public API might run an app afoul of Apple's rules.