0

enter image description here

Issue found: Invalid Encryption Declaration on your Data safety form We’ve detected discrepancies between how your app collects and shares user data and what was declared in your app’s Data safety form. All apps are required to complete an accurate Data safety form that discloses their data collection and sharing practices - this is required even if your app does not collect any user data.

You have declared that user data is encrypted in transit in your app’s Data safety form and we’ve detected unencrypted network traffic that may carry user data off device.

Issue details

We found an issue in the following area(s):

SPLIT_BUNDLE 2: Policy Declaration - Data Safety Section: "http://atracking-auto.astrodsp.com"

The libraries I use are:

  1. Java-WebSocket - github.com/TooTallNate/Java-WebSocket
  2. Connect-SDK-Android - github.com/ConnectSDK/Connect-SDK-Android
  3. AndroidAsync - github.com/koush/AndroidAsync
  4. nv-websocket-client - github.com/TakahikoKawasaki/nv-websocket-client

I suspect it's coming from the Connect-SDK-Android library. So is there any way to solve this problem completely? I tried searching but still can't find it. Thank you!

DucK
  • 1
  • 1

1 Answers1

0

It seems your app using http schema to transfer data, however, in your App's Data safety form, you've declared that user's data is encrypted in transit in your app. It is conflict.

The http link that Google found is http://atracking-auto.astrodsp.com

You have to:

  1. Update the declaration in App's Data safety form to unencrypted in transit. Or
  2. Update your link to using https schema.
NamNH
  • 1,752
  • 1
  • 15
  • 37
  • thank you for the answer, however my app used few libraries on github and i don't know which one contains this code. The libraries I use are: 1. Java-WebSocket - https://github.com/TooTallNate/Java-WebSocket 2. Connect-SDK-Android - https://github.com/ConnectSDK/Connect-SDK-Android 3. AndroidAsync - https://github.com/koush/AndroidAsync 4. nv-websocket-client - https://github.com/TakahikoKawasaki/nv-websocket-client I tried searching for http links in there but couldn't find them, can you help me? – DucK May 16 '23 at 13:51
  • After a while of review and reference, I suspect that it's because the Connect-SDK-Android library already has that activity, because there is "android:usesCleartextTraffic="true"". However, I still can't find that tracking link anywhere – DucK May 17 '23 at 10:34
  • Sorry to hear that, It's hard to find from the used libraries. You can see the link is redirected to `https` when i clicked. Try to look at the same issue https://stackoverflow.com/q/71199143/3682565 maybe this help – NamNH May 18 '23 at 06:34