'How to fill in Google Play Data Safety form taking into account Firebase Analytics and Firebase Crashlytics libraries?
I have an app which does not push any data to any server except that it uses the Firebase Analytics and Firebase Crashlytics libraries to submit analytics and crash reports to my Firebase account. My use of both of these libraries is bare minimum. I submit analytics events as follows...
FirebaseAnalytics.getInstance(applicationContext).logEvent("SomeEvent", bundle)
... and I submit exceptions as follows...
FirebaseCrashlytics.getInstance().recordException(exception)
Neither the bundles submitted via FirebaseAnalytics nor the exceptions submitted via FirebaseCrashlytics contain any of the user's personal data nor any data that identifies the user. The exceptions just convey that a certain area of the application has failed and the bundles just convey that a certain button was tapped without linking in any way to the user.
With this in mind, how do I answer the following "Data collection and security" questions in the Google Play Data Safety form:
- Does your app collect or share any of the required user data types? [Yes/No]
- Is all of the user data collected by your app encrypted in transit? [Yes/No]
- Do you provide a way for users to request that their data is deleted? [Yes/No]
Solution 1:[1]
There is a repo with all required information required for the Data safety form - link
Solution 2:[2]
I, like the OP, use Firebase Crashlytics and Analytics, with anonymous data. My guess is that the answer to the first question is NO because Provide information for Google Play's Data safety section says:
Not in scope for data collection ...
End-to-end encryption: User data that is sent off-device, but that is unreadable by you or anyone other than the sender and recipient as a result of end-to-end encryption does not need to be disclosed. The encrypted data must not be readable by any intermediary entity, including the developer, and only sender and recipient may have necessary keys.
As I understand, Firebase collects user data with end-to-end encryption, unreadable by me, and the recipient, Firebase itself, shows me anonymous data. Just my 2 cents.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Dmitrijs |
| Solution 2 | Miguel Callejón Berenguer |