无源码无法重编译APK，移除Firebase与AdMob配置后是否符合GDPR？

API 探路者

2026-5-27

Great question—this is a really common edge case when dealing with legacy apps you can’t rebuild due to lost source code. Let’s break this down based on GDPR’s core requirements:

First, the core of GDPR: actual data processing, not just code presence
GDPR regulates active data processing (collection, storage, transmission, etc.), not static, unused code. Since you’ve:
- Deleted the Firebase project entirely (so no endpoint exists to receive analytics data)
- Removed AdMob ad banners from the console (so no ad requests are being served or tracked)
  The leftover code in your app can’t initiate or complete any data collection/transmission. Even if the code tries to make API calls, they’ll fail silently with no data being sent to or stored by Google. This means you’re not engaging in any GDPR-regulated data processing right now, which satisfies the key compliance requirement here.
But don’t overlook transparency and user rights
GDPR requires you to be transparent about what data your app could or does process. If your app’s existing privacy policy still mentions Firebase Analytics or AdMob, you need to update it to clarify that these features have been fully disabled and no data is being collected anymore. Users have a right to accurate information about your app’s data practices, even if those practices have changed.
Protect yourself with audit trails
Keep records of your actions: screenshots of the deleted Firebase project, AdMob console logs showing ad units were removed, and any timestamps of these changes. If you ever face a compliance audit, these records will prove you took intentional steps to stop data processing, which is critical for defending your position.
A note on future risk
While you’re compliant now, be careful not to accidentally reactivate these services (e.g., recreating the Firebase project with the same package name, or re-adding AdMob units for the app). Since the code is still present, this would immediately restart data processing and put you out of compliance.