Get Rejected by Google Play because of Violation of User Data, Permissions and APIs that Access Sensitive Information policy

[robertgotitapp]

Braintree SDK Version

6.0.2

Environment

Production

Android Version & Device

Google Play Review

Braintree dependencies

com.braintreepayments.api:drop-in:6.0.2

Describe the bug

App being reject by google play due to : Violation of User Data, Permissions and APIs that Access Sensitive Information policy

We reviewed SDKs used by your app and found non-compliant version(s) of SDK(s) which facilitates the transmission of collection of users’ data without meeting the prominent disclosure guidelines and/or privacy policy guidelines. This data may include, but is not limited to:

• Phone number
• Installed packages (apps)
• Social account information
• Primary account information

To bring your app into compliance, follow these steps:

You may consider upgrading to a policy-compliant version of this SDK, if available from your SDK provider or removing the SDK.

• Cardinal Commerce org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk: Consider upgrading to version 5.0.5-rc.1 of the SDK.

To reproduce

N/A

Expected behavior

Should be able to pass the review from google play.

Screenshots

[sarahkoop]

Hi @robertgotitapp - The latest version of the drop-in SDK (currently 6.14.0) contains an updated version of the Cardinal SDK. Can you please upgrade to the latest and confirm if you are still experiencing this issue? Make sure that each track you've released in the google play store uses the new version of your app with the latest version of DropIn.

[robertgotitapp]

After upgrading to 6.14.0, it works just fine. Thanks for you help @sarahkoop