Issue found: Invalid Data safety form
...
We found an issue in the following area(s):
SPLIT_BUNDLE : Policy Declaration - Data Safety Section: Personal Info Data Type - Email Address
I recently received this from google about my Android app. I understand I have to declare what data we collect etc and how to do this in the Data Safety form. The problem is, my app does not collect email address at all and I have no intention of doing so. Google didn't explain where in my app's code or imported libraries that email address collection may be occurring - so I am at a total loss as to why they believe I'm collecting email addresses.
My app does use some libraries which could in theory collect emails - like 'com.android.billingclient', 'com.google.firebase:firebase-analytics' and 'com.google.firebase:firebase-crashlytics'; but I cannot find anywhere where they state this information is collected. I've checked all the SDKs that we use in the Google Play SDK Index and of those which post the data safety information, none collect it.
I have told this to google and they just responded with the same warning, no help there.
This currently leaves me 2 options:
- Add that my app collects Email Addresses, when it doesn't, to the Data Safety section of my app - but I do not want to tell users I collect something that I don't. I would possibly have to declare in-app that I collect something that I do not.
- Do nothing and likely get kicked off the Play Store.
Any suggestions?
I expect google not to tell me about this in the first place.