How to fill in Google Play Data Safety form taking into account Firebase Analytics and Firebase Crashlytics libraries?

Viewed 2184

I have an app which does not push any data to any server except that it uses the Firebase Analytics and Firebase Crashlytics libraries to submit analytics and crash reports to my Firebase account. My use of both of these libraries is bare minimum. I submit analytics events as follows...

FirebaseAnalytics.getInstance(applicationContext).logEvent("SomeEvent", bundle)

... and I submit exceptions as follows...

FirebaseCrashlytics.getInstance().recordException(exception)

Neither the bundles submitted via FirebaseAnalytics nor the exceptions submitted via FirebaseCrashlytics contain any of the user's personal data nor any data that identifies the user. The exceptions just convey that a certain area of the application has failed and the bundles just convey that a certain button was tapped without linking in any way to the user.

With this in mind, how do I answer the following "Data collection and security" questions in the Google Play Data Safety form:

  1. Does your app collect or share any of the required user data types? [Yes/No]
  2. Is all of the user data collected by your app encrypted in transit? [Yes/No]
  3. Do you provide a way for users to request that their data is deleted? [Yes/No]
2 Answers

There is a repo with all required information required for the Data safety form - link

The same applies to firebase as to admob

  • Does your app collect or share any of the required user data types? Yes
  • Is all of the user data collected by your app encrypted in transit? Yes
  • Do you provide a way for users to request that their data is deleted? No

Location > Approximate location
App activity > Page views and taps in app
App info and performance > Crash logs, Diagnostics
Device or other identifiers > Device or other identifiers


How do I know this for sure?

Because under device and other identifiers the extra info states:

Identifiers that relate to an individual device, browser or app. For example, an IMEI number, MAC address, Widevine device ID, Firebase installation ID or advertising identifier.

Which indicates that they do consider Firebase to be collecting data

Related