Search code examples
firebasegoogle-playcrashlytics

Google action required Issue found: Violation of User Data policy


Crossposting from here

Hello, I have received the following on 2 apps from gogIe that I build a while back and have no idea on how to fix it! it goes like this: We reviewed SDKs used by your app and found noncompliant version(s) of SDK(s) which collects persistent device identifiers. Persistent device identifiers may not be linked to other personal and sensitive user data or resettable device identifiers.

Your app may face additional enforcement actions, if you do not resolve this issue by February 28, 2024 .

Issue details

We found an issue in the following area(s):

Version code 4:
    SDK: Fabric (Firebase Crashlytics)- ID Bridging io.fabric.sdk.android:fabric (consider upgrading to version

com.google.firebase:firebase-crashlytics:18.4.0)

To bring your app into compliance, follow these steps :

You may consider upgrading to a policy-compliant version of this SDK, if available from your SDK provider or removing the SDK.

Fabric (Firebase Crashlytics)- ID Bridging io.fabric.sdk.android:fabric: Consider upgrading to version

com.google.firebase:firebase-crashlytics:18.4.0 of the SDK.


Solution

  • After digging through our Google Play Console we found that for our own application we had an old APK marked with version 580 that was still available for older devices (API 15+).

    That APK was using an old version of firebase which at the same time had the famous io.fabric SDK mentioned in the email from Google Play.

    Removing all APK's that may include the io.fabric sdk thing and making a new release seems to address the issue.