10-day Google Play Developer Terms violation notification regarding OneSignal push notification service

Question

Today I received an email from Google about a policy violation regarding my Onesignal notification service used in my application. It is about collecting personal information (PII) without disclosing

Next email

"Hi, Google Play Developer,

We found that the applications listed at the end of this letter contain a version of OneSignal, a messaging SDK that collects personal information (PII) without disclosure. Such applications may be considered in violation of our user data policy.

Action required: Your applications may be removed from Google Play if the problem persists within 10 days after receiving this message. If the affected version is inactive, future applications will be rejected if you try to publish it without first resolving the problem.

You can solve this problem:

adding the privacy policy URL to the list of applications and within the application, notifying the user that their PII is being collected; or by removing any such features from your application. You may need to contact your SDK provider for an updated, policy-compatible version that will be included in your application. After solving the problem, you will need to log into your developer console and send an updated version of your application.

To help

If you think that we sent this warning by mistake, you can contact our developer support team.

Hi,

Google Play Team

Affected Applications and Version (s):

com.app.name 9; 10

Any idea on fixing the problem :) Any help would be appreciated

Answer 1

As stated in the message:

adding the privacy policy URL to the list of applications and within the application, notifying the user that their PII is being collected; or removing any such features from your application.

If you don’t have a privacy policy URL, you need to create one. Create your own .com domain or get a web page from a host, for example Wix.com , after which you write your privacy policy where you tell the user that you are collecting personal information in your application. You also create the "about" or "information" section in your application, where you specify more or less the same thing and you should be good to go.

Answer 2

We get the following response from their development team, hope this helps:

Hi, thanks for touching and it’s a pity you ran into this problem. We recently learned that some developers received this notification, and we prepared a solution.

We recommend that you complete the following three steps to resolve this issue. Any of these steps may be sufficient, but we recommend just in case, if possible, just in case. We apologize for the inconvenience.

1- Update the application so that it does not use the Android permission "Identification" (android.permission.GET_ACCOUNTS) if this application is not required by your application.

2- Update or add privacy policy to your application. You must add this Privacy Policy to your app’s store page in the "Privacy Policy" section of the "Store List" page of the Google Developer Center. You must also add a link to this privacy policy in your application and resubmit your application to the Google Play store.

If you do not have a Privacy Policy, there are several websites to create them, including this one: http://www.docracy.com/mobileprivacy Finally, you should also add the following text from this link or https: //gist.github. com / gdeglin / c22bed4b9f7f8838339faed2d7cea604 (or its substantial equivalent) into your privacy policy.

3 Use the new, updated version of the OneSignal SDK that meets the requirements

Answer 3

You should contact OneSignal support to find out how to solve it.