Privacy concerns for users (new policy, full disclosure here, and bits of opinionation about Google) about chameleonminilivedebugger

[maxieds]

There's also this, which was really just the first bit of user data I could click my way through on the developer console:

I think I'm finally ready to pay for a private email account. Have a nice night.

[maxieds]

Here is the link: User Privacy Policy.

[maxieds]

And for the record, I don't think that this is an overraction. Is anyone else vaguely concerned that a "security" app supporting a dev board that only a cracker/hacker would buy had a leak of user privacy details (or advertising IDs, which are about as detailed)? Surely, I am not the only one who can get my chain pulled by Google? Their policies towards privacy and aggregations of user data are not to protect the users, they're formulated by skyscraper deep teams of landsharks to obscure any attempts by users to make them accountable for the ***t they do and profit from.

I will pose one more observation, that it may provide someone else with some insight to what this (could) means. There is now a privacy policy in place which I have had to endorse by no minor feat of coersion, which now puts them in a position of absolutely no liability for any leakages of user data associated with this application. Now, let's say as I insist was the case, that there has been some massive security flaw introduced by them pushing Android 9.whatever out the door too soon. The sensitive user data has been leaked, they know it, and by threats to be blacklisted I had to comply with posting a legally binding document per their policy (which I and you agreed to to use play store). They are now legally absolved of any responsibility should this happen again. And, I cannot get an even close to accurate account from their "policy team" about the discovery of this leakage with the app.

What are the chances in hell that this point could ever be made after next week, say? This is not an acceptable use of their power to bully developers into contractual agreements which cannot (ever) be unbound. I think that my data is more sensitive and important than most. As a user of the application I am upset that my identifying information was allowed to escape their framework. Why is this not completely offensive and unacceptable business practice to anyone else? I'm not afraid to stick my shoe in my mouth to insult this company and I hope that at least it gets registered that I am trying to force a decent technical explanation to this problem. However, they are larger, and not afraid to ignore my emails, on a platform they ultimately control anyway. Hell, if I get hacked tonight for opening my mouth and being a bitch, their servers may just drop my request entirely. Then, I can go get a court order by a federal judge since their server farm is out of state. Since I am so good at predicting the future, I will already tell you how this ends, my request is denied on the grounds that I mishandled user data, hacked myself, and for good measure something else happens.

Honestly, for a group of hackers who hang out on a software site, I would like to expect that I'm not the only one with misplaced, but still large enough body parts to at least bitch and moan about it. Consider the grave state of politics in the US. If I am never heard from again it's because I hero of the flame succeed in lighting the analytics devil's tail on fire and ended up disappeared for it. Good night again.

[maxieds]

Latest response from Google:

Thanks for contacting the Google Play Team.

Status: Chameleon Mini Live Debugger (com.maxieds.chameleonminilivedebugger) App not available on Google Play

I’ve reviewed your appeal request and found that your app still violates Google Play Policy. I’ve included details below about the specific issue with your app and what you can do to get your app back on Google Play.

Step 1: Fix the policy violation with your app

During review, we found that your app violates the Usage of Android Advertising ID and User Data policy:

Google Play requires developers to provide a valid privacy policy when the app requests or handles sensitive user or device information. We’ve identified that your app collects and transmits the Android advertising identifier, which is subject to a privacy policy requirement. If your app collects the Android advertising ID, you must provide a valid privacy policy in both the designated field in the Play Console, and from within the app.

If your app handles personal or sensitive user data (including personally identifiable information, financial and payment information, authentication information, phonebook or contact data, microphone and camera sensor data, and sensitive device data) then your app must:
Post a valid privacy policy in both the designated field in the Play Console and from within the Play distributed app itself.
Handle the user data securely, including transmitting it using modern cryptography (for example, over HTTPS).
The privacy policy must, together with any in-app disclosures, comprehensively disclose how your app collects, uses and shares user data, including the types of parties with whom it’s shared.
Please update your app to fix the issue. You may also want to double check that your app complies with all other Developer Program Policies, as additional enforcement could occur if there are further policy violations.

This rejection doesn't impact the standing of your Google Play Developer Account, but repeated violations can result in the suspension of this app or your Google Play Developer account.

Step 2: Submit your updated app or APK

Read through the Usage of Android Advertising ID and User Data policies, as well as the Developer Distribution Agreement, and make appropriate changes to your app. If you decide to collect sensitive user information, be sure to abide by the above policies, and include a link to a valid privacy policy on your app's store listing page and within your app.
Make sure that your app is compliant with all other Developer Program Policies. Additional enforcement could occur if there are further policy violations.
Sign in to your Play Console and submit the update to your app.
Unfortunately I'm not able to comment on your planned implementation. If you think your app is in compliance, please submit your app for another review.
Please let me know if you have any other questions. Thanks for working with us to fix the policy issue and for your continued support of Google Play.

Regards,
Elaine
The Google Play Team

[maxieds]

This is insanity! I received this email over a day after corrections and uploading. Sorry to users for any prospective downtime in dealing with the illiterate desk clerks who field these requests at Google.

[maxieds]

See #26 for the status here.