Google Play Data Safety Form and Privacy Policy
Who must complete the Data safety form, what to declare and the mistakes that cause problems later.
Read the guide →Google Play Account Deletion Requirement Explained
Quick answer If your Android app lets users create an account, Google Play requires an in-app way to delete the account and its data, plus a web link where users can request deletion. You enter the link in Play Console and answer the deletion questions in the Data safety form.
If your app has sign-up or login, Google Play expects you to let users delete their account and data, both inside the app and from the web. Many first-time developers discover this rule only when a form asks for a deletion URL. This guide explains who it covers, what exactly Google requires, the dates that matter and how to set it up.
What is the Google Play account deletion requirement?
The Google Play account deletion requirement says that if your app lets users create an account, you must give them an in-app way to delete that account and the data tied to it, and a web link where they can request deletion without installing the app. You declare this in Play Console, including in the Data safety form. Google explains it on its page about app account deletion requirements.
It matters for any app with a login, including small apps built with no-code tools that use Firebase or another backend for sign-in. If your app has no accounts, you can skip most of this guide.
Which apps must comply?
| App type | In scope? | Why |
|---|---|---|
| App with sign-up or login inside the app | Yes | Google says the policy applies if your app allows users to create an account from within the app |
| App that offers account creation in only part of the experience | Yes | Google says even if some features work without an account, deletion must be offered |
| App without any account | No | Apps without account creation are not in scope |
| Accounts created and operated offline | No | Google says these are not app accounts for this policy |
| Permanently private and enterprise device management apps | Exempt | Google names them as exempt |
| Non-mobile apps such as Android TV or Wear OS | Partly | No in-app option needed, but a discoverable option outside the app and the web link are |
If you are unsure how your sign-in works, treat it as in scope when your service stores an account record for the user. Read Google's page for the exact wording.
What exactly does Google require?
| Requirement | What Google says |
|---|---|
| In-app path | Provide users with an in-app path to delete their app accounts and associated data. The path should be prominent, for example in account settings. |
| Web link | Provide a web link resource where users can request deletion of the account and associated data. |
| Where to enter the link | Use the designated URL form field in Play Console. The link must work, show the deletion request path prominently and reference your app or developer name as it appears on Google Play. |
| What to delete | The user data associated with that app account, including data you declared as collected in the Data safety section. Delete from your servers and ask service providers to do the same. |
| What you may keep | Data kept for legitimate reasons such as security, fraud prevention or regulatory compliance. You must clearly inform users of retention practices, such as in your privacy policy. |
Google's announcement, as reported by BleepingComputer, also describes letting users delete only certain data, such as activity history, instead of the whole account. Check Google's page for what applies to your app.
What are the key dates?
| Date | What happened |
|---|---|
| April 2023 | Google announced the requirement and added deletion questions to the Data safety form |
| December 7, 2023 | Deadline to complete the data deletion questions |
| May 31, 2024 | Last day to request an extension. After this, non-compliant apps may face enforcement, such as removal from Google Play. |
| Early 2024 onward | Store listings show data deletion information to users |
These dates are in the past, so a new app should be compliant from its first release. Reports at the time said apps that missed the deadline could be blocked from new releases. Check Google's page for the current position.
How do you set it up?
- List what you storeWrite down every place user data lives: your database, authentication provider, analytics and any third-party service.
- Add a Delete account option in the appPut it in settings or the profile screen, ask the user to confirm, and explain what will be deleted.
- Delete on the server sideRemove the account and the data tied to it from your backend and ask your service providers to delete theirs.
- Create a public web pageIt should explain how to request deletion without installing the app. The next section shows what to include.
- Update your privacy policyDescribe deletion and any data you keep, and why. See the Data safety and privacy policy guide.
- Add the URL in Play Console and answer the formEnter the link in the designated field and answer the deletion questions in Data safety.
- Help reviewers test itGive working credentials in the app access section. See app access instructions for reviewers.
What should the web page contain?
Google requires the page to be easy to use and to reference your app or developer name exactly as it appears on Google Play. A simple page is enough.
Delete your [App name] account
This page explains how to delete your account and data for
[App name] by [Developer name on Google Play].
Option 1: In the app
Open Settings > Account > Delete account.
Option 2: By email
Send a request to [your email] from the address linked to
your account. Include the app name. We will confirm and
delete your account within [number] days.
What we delete: [account details, content you created,
other data tied to your account].
What we may keep, and why: [for example, records needed for
security or legal reasons, kept for [period]].Host it on your own website at a stable address and link it from your privacy policy.
What do you answer in the Data safety form?
Google says all developers answer the deletion questions on the App content page. If your app is in scope, you say whether you offer account deletion and give the web link. Some of these answers appear in your store listing.
| Question | What to answer |
|---|---|
| Does the app let users create an account? | Yes if there is sign-up or login inside the app, no otherwise |
| Can users request account deletion in the app? | Yes, and describe the path |
| Web link to request deletion | The URL of your page |
| Can users request deletion of some data without deleting the account? | Answer according to what you built |
| Do you keep data after deletion? | Yes if you keep any, and explain why in your privacy policy |
The full walkthrough of the form is in Google Play Data safety form and privacy policy. Children's apps also need care with the target audience declaration.
What are the common mistakes?
| Mistake | Fix |
|---|---|
| Only a web form, no in-app option | Add a Delete account option in the app |
| Link is broken or needs a login | Make the page public and test it |
| Page does not mention the app name | Use the exact name from your Google Play listing |
| Deleting from the app but not the server | Delete the data in your backend and at providers |
| Privacy policy says nothing about retention | Explain what you keep and why |
| Reviewers cannot log in | Give working test credentials |
Part of a series: this article is one chapter of Google Play Closed Testing: The Complete Guide. Start there for the full roadmap from setup to production.
Sources
- Google Play Console Help: understanding Google Play's app account deletion requirements
- BleepingComputer: Google will require Android apps to let you delete your account
Frequently asked questions
Does my app need account deletion if it has no login?
No. Google's policy applies to apps that let users create an account from within the app. Apps without account creation are not in scope.
Do I need both an in-app option and a web link?
Yes. Google requires an in-app path to delete the account and associated data, and a web link resource where users can request deletion. Non-mobile apps such as Android TV or Wear OS need a discoverable option outside the app and the web link.
Can I keep some user data after deletion?
Google says you may keep data for legitimate reasons such as security, fraud prevention or regulatory compliance, as long as you clearly inform users about your retention practices, for example in your privacy policy.
Where do I put the web link?
Google says to enter it in the designated URL form field in Play Console. The link must work, make the deletion request path prominent and reference your app or developer name as it appears on Google Play.
Is this still an active requirement?
Yes. Google announced it in April 2023, set a deadline of December 7, 2023 for the Data safety questions, allowed extensions to May 31, 2024 and said non-compliant apps may face enforcement after that. New apps should comply from their first release.
Do reviewers need to see the deletion option?
Reviewers can only check it if they can sign in. Provide working test credentials in your app access instructions.
