Is my app or its dependencies violating the Androi

Question

I've just received this message from Google Play but I'm not collecting the Advertising ID.

Reason for warning: Violation of Usage of Android Advertising ID policy and section 4.8 of the Developer Distribution Agreement

Google Play requires developers to provide a valid privacy policy when the app requests or handles sensitive user or device information. We’ve identified that your app collects and transmits the Android advertising ID, which is subject to a privacy policy requirement.

Is it possible any of my dependencies uses it? Here's the list of dependencies:

implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
implementation "org.jetbrains.anko:anko-common:$anko_version"

implementation ("com.android.support:appcompat-v7:$android_support_version") {
    exclude group: 'com.android.support', module: 'animated-vector-drawable'
    exclude group: 'com.android.support', module: 'design'
}
implementation ("com.android.support:design:$android_support_version") {
    exclude group: 'com.android.support', module: 'animated-vector-drawable'
}
implementation ("com.android.support:cardview-v7:$android_support_version") {
    exclude group: 'com.android.support', module: 'animated-vector-drawable'
    exclude group: 'com.android.support', module: 'design'
}
implementation 'com.github.PhilJay:MPAndroidChart:v3.0.2'
implementation 'com.github.apl-devs:appintro:v4.2.3'
implementation('com.crashlytics.sdk.android:crashlytics:2.6.8@aar') {
    transitive = true
}
implementation 'com.firebase:firebase-jobdispatcher:0.7.0'
implementation ("com.google.firebase:firebase-firestore:$firestore_version") {
    exclude group: 'com.google.firebase', module: 'firebase-auth'
}
implementation ("com.google.firebase:firebase-auth:$firebase_version") {
    exclude group: 'com.google.firebase', module: 'firebase-firestore'
}
implementation ("com.google.firebase:firebase-storage:$firebase_version") {
    exclude group: 'com.google.firebase', module: 'firebase-firestore'
}
implementation ('com.google.android.gms:play-services-auth:16.0.0') {
    exclude group: 'com.google.firebase', module: 'firebase-firestore'
}
implementation 'com.android.support.constraint:constraint-layout:1.1.3'
implementation 'com.android.support:multidex:1.0.3'
implementation ("com.android.support:exifinterface:$android_support_version") {
    exclude group: 'com.android.support', module: 'animated-vector-drawable'
    exclude group: 'com.android.support', module: 'design'
}
implementation 'com.soundcloud.android:android-crop:1.0.1@aar'
implementation 'com.github.bumptech.glide:glide:4.7.1'

Answer 1

First, you have to create a privacy policy URL and then add this URL in GOOGLE PUBLISHER CONSOLE based on application. You can easily create privacy policy using this website.

Privacy Policies

If you have a server/host try to upload privacy policy page on your own server otherwise you can use this website for storing.

Mentioned: you have to add this policy page on your application. Create a menu as privacy police and show all your policy content on a dialog. Easiest way.

Answer 2

copied from google mail

Please contact policy support team.

1. If your app requests user data or makes sensitive permissions requests such as Phone, Accounts, Contacts, Camera, Microphone, or if your app uses the Android advertising identifier, you'll need to add a valid privacy policy in two places: your app's Store Listing page (instructions below) and within your app.
2. As a second option, you can remove any requests for user data or sensitive permissions. For example, you would need to remove {copy and paste permissions here} from the manifest. You will not need to add a privacy policy if you remove these requests. If you cannot complete steps 1 or 2, you'll need to unpublish the app from the Play Store.
3. If your app is already unpublished, you don’t need to take action unless you re-publish the app in the future.

You can follow these steps to add a privacy policy to your Store Listing:

1. Sign in to your Play Console.

2. Select your app.

3. On the left side, select Store presence > Store listing.

4. Under "Privacy Policy," enter the URL where you have the privacy policy hosted online.

5. Save your changes to submit the update to your app.

Please visit our help center for more information about Google Play privacy policy requirements.

Answer 3

The issue states the violation is due to using user's Android Advertising ID. I had the same problem. I created a privacy policy and added the url to that in my app and to the Google Play page. Submitted an update and the App is live again. Make sure to mention that you are collecting a personally identifiable information, Android Advertising ID, in your app. I've given a link to my app's privacy policy, refer to that if you need to know how exactly it is mentioned.

This is my privacy policy:

https://nwsty.com/privacy-policy-and-terms-of-use-android/

You can easily create a privacy policy here:

https://app-privacy-policy-generator.firebaseapp.com/

Just for reference, this is the app in question: https://play.google.com/store/apps/details?id=com.instancea.nwsty&hl=en_US

Answer 4

If your app uses Firebase SDKs like analytics and all, you can disable Advertising ID collection on SDK level by putting the following line in your AndroidManifest.xml file under the Application tag.

<meta-data android:name="google_analytics_adid_collection_enabled" android:value="false" />

You can read more about it here.

My app was not even an ad supported application but still it got hit by this section 4.8 clause. By employing the above technique I was able to get it back on Google Play without submitting any privacy policy.

Answer 5

I had one of my app removed and another got warning for reason given as Issue: Violation of Usage of Android Advertising ID policy and section 4.8 of the Developer Distribution Agreement

I created the privacy policies for both the apps, updated the link in play console store listing, included privacy policy link in main menu of both apps and resubmitted apps. Both the apps are now live and running . If you need you can copy the policy, make sure to do edits according to your app permissions and name. Privacy policy

I don't know if these play console removal and warning count as strike, or somebody can enlighten me.

Answer 6

this is the cause Google Play Services version 4.0 introduced new APIs and an ID for use by advertising and analytics providers. We need to provide a privacy statement and make it available on the web. For a sample go https://digital.com/blog/best-privacy-policy-generators/

To change settings on your android app. Developer Console, Store Listing, scroll down to Privacy Policy. Add the url here.