Google Play Rejections and Policy Violations: A Fix-It Guide
Short answer
Most Google Play rejections come from a short list: an inaccurate data safety form or missing privacy policy, sensitive permissions without a valid declaration, an outdated target API level, misleading metadata, missing account deletion options, or apps with too little functionality. Read the exact policy named in the Play Console notice, fix the build or the declaration, resubmit, and use the appeal option only if you believe the decision is wrong.
Google Play's review is largely automated at first, which makes its messages feel terse. The policy name in the email or Play Console notice is the key: it tells you which part of your app, listing or declarations triggered the decision. This guide sorts the most common issues by where the fix lives, so you can go straight to the right place.
First, understand what kind of action you received
| Action | What it means | Urgency |
|---|---|---|
| Rejected update | The new version or listing change was not approved; the previous version stays live | Fix before your next release |
| Warning with a deadline | The live app violates a policy and must be fixed by a date | Fix before the deadline to avoid removal |
| App removed | The app is no longer available to new users | High; fix and resubmit |
| App suspended | A serious or repeated violation; it counts against your account | Very high; consider an appeal if unjustified |
| Account termination | Repeated or severe violations; all apps are affected | Critical; appeal through the official process |
The Policy status page in Play Console lists open issues per app, including deadlines. Check it whenever you receive an email, because one email can hide several issues.
Fixes that live in Play Console declarations
Data safety form doesn't match the app
Google compares your declarations with what the app and its SDKs actually do. Typical gaps: an analytics or crash SDK collecting device identifiers, an ad SDK, or user content sent to an API. Update the form to reflect all data types, purposes and whether data is shared. Our guide to privacy labels and the data safety form walks through each section.
Privacy policy missing or unreachable
The policy URL must be active, publicly accessible, not a PDF behind a login, and it must cover the app. It also needs to be reachable inside the app.
Account deletion requirement
If users can create accounts, Google requires an in-app way to request account deletion and a web link where users can request deletion without reinstalling the app. Add the link in the data safety section.
Sensitive permission declarations
Some permissions require a declaration form explaining why your app's core functionality needs them, and sometimes a video. Common examples are background location, SMS and call log, QUERY_ALL_PACKAGES, and broad photo and video access. Since 2024, Google has limited broad photo and video permissions to apps whose core purpose needs them; others should use the system photo picker. The fastest fix is often to remove the permission and use a less invasive API.
Fixes that live in the build
- Target API level too old. Google requires new apps and updates to target a recent Android API level, roughly within a year of the latest major release. Update
targetSdkVersion, then test behavior changes such as notification permissions and foreground service types. - Undeclared foreground service types. Apps targeting newer Android versions must declare foreground service types and may need to justify them in Play Console.
- Crashes or broken functionality. Pre-launch reports in Play Console show crashes on test devices. Fix them before resubmitting.
- Minimum functionality and WebView spam. Apps that offer very little, or that mainly display a website the developer does not own or have permission to use, can be rejected under the spam policy. Publish only properties you control, and add genuine app features.
- Ads behaving badly. Full-screen ads that appear unexpectedly or block normal use violate the ads policy. Review your ad placements and SDK settings.
Fixes that live in the store listing
- Misleading or keyword-stuffed metadata. Avoid repeated keywords, ranking claims ("#1 app"), emojis or excessive capitals in the title, and names of other apps or brands.
- Screenshots that misrepresent the app. Show the real UI. Marketing frames are fine; features that do not exist are not.
- Impersonation or intellectual property. Using another brand's name or logo without authorization leads to removal. If you publish for a client, publish in the client's account or have written permission.
- Wrong content rating or target audience. If children are in your target audience, the Families policy applies with additional requirements for ads and data.
How to fix, resubmit and appeal
- Identify the exact policy named in the notice and open the corresponding page in the Policy Center.
- Find every instance of the issue, not just the one in the example. Automated checks often run again on the next submission.
- Fix the build, the declaration or the listing, then upload a new version or update the listing.
- Resubmit for review and watch the Policy status page.
- Appeal if you disagree. Notices include an appeal option. Explain clearly and factually why the app complies, with references to the policy text. Do not appeal and resubmit unchanged versions repeatedly; repeated violations can escalate to suspension.
Keep it from happening again
Many Play issues appear with no change on your side, because policies and API requirements evolve. Assign someone to read Google's policy update emails, review the data safety form whenever you add an SDK, and plan one maintenance release per year for the target API level. New personal accounts face an extra gate before the first production release, the closed test explained in the 12-tester rule. If you also ship to iOS, compare with the most common App Store rejection reasons, since the two stores flag different things.
If a rejection blocks your release and you want experienced help, appsubmitter.io guides you through Play policy issues and resubmissions in your own developer account, and can set up a CI/CD pipeline so builds and declarations stay consistent.
Frequently asked questions
Why was my app rejected for its data safety form?
Usually because the declared data collection does not match what the app or its SDKs actually do, for example an analytics or ad SDK collecting device identifiers. Audit all SDKs and update the form to cover every data type, purpose and sharing.
What is the difference between a rejection and a suspension on Google Play?
A rejection blocks a new version or listing change while the previous version stays live. A suspension removes the app and counts against your developer account, so repeated suspensions can lead to account termination.
How do I appeal a Google Play policy decision?
Use the appeal option linked in the policy notice or Play Console. Explain factually why the app complies, referencing the specific policy, and avoid resubmitting unchanged versions.
Does Google Play reject WebView apps?
Not as a category. Apps that mainly display a website the developer does not own or lack meaningful functionality can be rejected under the spam policy, but WebView apps for your own web service with real app features are common on Play.
Want a second opinion on your project?
Book a free 30-minute call with our team. We look at your idea, prototype or app and tell you honestly which route makes sense – whether you work with us or not.
Book a free call or write to [email protected]
