Short answer
Google reviews the Data safety form with the app, and you alone are responsible for it being complete and accurate. List every kind of user data the app and its SDKs (third-party code libraries built into the app) collect or share, and answer the security questions truthfully. Link a working privacy policy, and if users can create an account, offer account deletion in the app and on the web. Then update the form and resubmit.
What to check, in order
01
SDKs collect data you didn’t declare
“This includes data collected and handled through any third-party libraries or SDKs used in their apps.” Google Play, Data safety section
Third-party libraries you add can collect or send user data too, even when your own code doesn’t, and the form has to include it. Check each SDK provider’s published Data safety guidance, which Google Play SDK Index may link to.
02
The form says one thing, the app does another
“When Google becomes aware of a discrepancy between your app behavior and your declaration, we may take appropriate action, including enforcement action.” Google Play, Data safety section
If the app asks for location, contacts or other data the form doesn’t mention, or the form claims something the app doesn’t do, Google may take enforcement action when it finds a mismatch like that. List what the app requests and sends, then answer the form from that list.
03
Users can sign up, but can’t delete their account
“If your app enables account creation, you must: provide users with an in-app path to delete their app accounts and associated data” Google Play, App account deletion requirements
If people can create an account in your app, Google requires a way to delete it inside the app and a web page where they can ask for deletion. The Data safety form also asks whether you give users a way to request that their data is deleted.
04
No privacy policy link, or one that doesn’t work
“Even developers with apps that do not collect any user data must complete this form and provide a link to their privacy policy.” Google Play, Data safety section
Every app needs a privacy policy link with the form, even one that collects nothing. Make sure the link opens a real page, and keep it consistent with what you declare.
05
Data you only process briefly
“User data transmitted off device that is processed ephemerally needs to be included in your form response” Google Play, Data safety section
Data the app sends to a server and handles only briefly still goes in the form. Google’s example is a weather app that sends the user’s location to fetch the weather, keeps it only in memory and doesn’t store it afterwards. Data that meets Google’s standard for this ephemeral processing is declared but not shown on the store listing; check the definition on the help page before you rely on it.
Checked against the vendor’s docs on : Google Play Help: Provide information for Google Play’s Data safety section; Google Play Help: App account deletion requirements.
Rather hand it over?
Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.
Related: Google Play 12 testers for 14 days · Expo EAS build failed · Target API 36 on Google Play · Android developer verification