Google Play Console检测到Appodeal依赖的myTracker SDK不合规的问题排查与解决方案咨询

Hey there, let's break down your questions one by one to get your Flutter app back in compliance with Google Play's user data policies.

1. 如何定位com.my.tracker:mytracker-sdk？ #

The easiest way to track where this SDK is coming from is to analyze your app's Gradle dependency tree:

• Open the Terminal in Android Studio (bottom toolbar), navigate to your app's root directory, and run this command:

  ./gradlew app:dependencies
  

  (Windows users can use gradlew.bat app:dependencies instead)
• Search the output for com.my.tracker:mytracker-sdk—you’ll see a hierarchy showing which parent dependency is pulling it in. Chances are it’s a transitive dependency from Appodeal’s SDK or the Appodeal Firebase service you’ve included.

Alternatively, use Android Studio’s built-in visual tool:

• Go to File > Project Structure > Dependencies
• Select your app module, then search for MyTracker in the list. Clicking on it will show you the full dependency path.

2. 如何实现持久设备标识符不与其他个人敏感数据或可重置设备标识符相关联？ #

Google’s policy prohibits linking persistent identifiers (like Android ID) with resettable ones (like Advertising ID) or sensitive data (like WiFi MAC addresses). Here’s how to fix this for MyTracker:

• Adjust MyTracker configuration: If you can’t remove the SDK, tweak its settings to stop associating these IDs. Look for initialization code or AndroidManifest meta-data that controls data collection—for example, disable Advertising ID collection or prevent it from being linked with Android ID.
• Use Appodeal’s built-in controls: Appodeal likely has flags to restrict third-party SDK data collection. Check their docs for config parameters to add when initializing Appodeal in your Flutter code, specifically to disable cross-identifier linking in MyTracker.
• Audit your own code: Make sure your app isn’t passing these identifiers together to any services (including Appodeal/MyTracker) or storing combined identifier data.

3. 该合规问题应如何解决，是否必须停用Appodeal广告？ #

You don’t need to stop using Appodeal—here’s a step-by-step fix:

1. Exclude MyTracker if possible: Once you’ve found which dependency pulls in MyTracker (from step 1), add an exclusion rule to your build.gradle. For example, if it comes from the core Appodeal SDK:

   implementation ('com.appodeal.ads:sdk:3.0.0.+') {
     exclude group: 'com.appodeal.ads.sdk.services', module: 'adjust'
     exclude group: 'com.appodeal.ads.sdk.services', module: 'appsflyer'
     exclude group: 'com.appodeal.ads.sdk.services', module: 'firebase'
     exclude group: 'com.appodeal.ads.sdk.services', module: 'facebook_analytics'
     exclude group: 'com.my.tracker', module: 'mytracker-sdk' // Add this exclusion
   }
   

   If it comes from the Appodeal Firebase service, add the exclusion there instead.
2. Configure privacy settings if exclusion isn’t an option: If MyTracker is required for Appodeal’s functionality, adjust its data collection as outlined in step 2. Ensure you disable cross-identifier linking and restrict collection to only necessary data.
3. Update your privacy policy: Clearly disclose what data is collected, how it’s used, and that you’re complying with Google’s policies by not linking persistent and resettable identifiers.
4. Resubmit your app: Upload the updated APK/AAB to Google Play Console, and in the policy compliance section, note that you’ve addressed the issue by either removing the non-compliant SDK or adjusting its settings.

内容的提问来源于stack exchange，提问作者NoProgress