Issue found: Invalid Data safety formWe reviewed your app’s Data safety form in Play Console and found discrepancies between it and how the app collects and shares user data. All apps are required to complete an accurate Data safety form that discloses their data collection and sharing practices - this is required even if your app does not collect any user data.
We detected user data transmitted off device that you have not disclosed in your app’s Data safety form as user data collected.
You must ensure that your app’s Data safety section accurately reflects your app’s data collection, sharing, and handling practices. This includes data collected and handled through any third-party libraries or SDKs used in your app. When available, we’ve included details on SDKs that contain code similar to the code in your APK that may be sending user data off device. You can check if your app uses any of these SDKs, but note that this list of SDKs may not be exhaustive. You must review and account for all data collected and shared by your app.
Issue details
We found an issue in the following area(s):
- SPLIT_BUNDLE 22: Policy Declaration - Data Safety Section: Device Or Other IDs Data Type - Device Or Other IDs (some common examples may include Advertising ID, Android ID, IMEI, BSSID, MAC address)
About the Data safety section in Google Play User Data policyYour app must be in compliance with this policy. If your app continues to be non-compliant, your app updates will be rejected and your app may face additional enforcement actions in the future.
Please make changes to align your app’s Data safety form with the app’s behavior. This can be done by either:
- Updating your form in Play Console to declare collection of Data Types noted below; or
- Removing unwanted functionality and attributable code that collects this user data from your app or libraries used in your app, and when applicable to deactivate all non-compliant APKs.
- To deactivate non-compliant APKS, you can create a new release and upload a compliant APK to each track containing the non-compliant APKs.
- Be sure to increment the APK version code. If using staged rollout, be sure to set the release to 100% rollout.
For helpful resources, you can:
sample codes:
val parameters = ConsentRequestParameters.Builder()
//.setConsentDebugSettings(debugSettings)
.setTagForUnderAgeOfConsent(false)
.build()
If I write the code above, when I test it, the GDPR message pops up when the application is opened. But I guess it gets rejected because I set the age status to false.
val parameters = ConsentRequestParameters.Builder()
//.setConsentDebugSettings(debugSettings)
.setTagForUnderAgeOfConsent(true)
.build()
If I set it to true, this time the GDPR message does not appear when the application is opened.
I wonder if it's not possible to generate GDPR message only in apps for kids?
Another issue is if the data security form is on the forum.
If I want to fill in "Device or other IDs"
There is the following warning:
You should not choose this data type because you have declared that personal and sensitive information is not collected in your application
If this information is incorrect, update your Audience and content form
Please can you help me?
What should I do?