Email from Google Play about SDKBOX v2.2.2.10 PII violation version

Hello Google Play Developer,

We detected that the app(s) listed at the end of this email contain a version of SDKBox that collects personally identifiable information (PII) without disclosure. Apps like this may be considered in violation of our User Data policy.

Action required: Your app(s) may be removed from Google Play if the issue is not resolved within 10 days of receiving this message. If the affected version is inactive, future submissions will be rejected if you attempt to publish without first resolving the issue.

You can resolve this issue by:

adding a privacy policy URL to your app listing and within the app, notifying the user that their PII is collected; or
removing any such functionality from your app. You may need to contact your SDK provider for an updated, policy compliant version to include in your app.
After resolving the issue, you’ll need to sign in to your Developer Console and submit the updated version of your app.

We’re here to help

If you feel we have sent this warning in error, you can contact our developer support team.

Regards,

The Google Play Team

Affected app(s) and version(s):

There is a topic already discussing this: Google keep complain about SDKBOX violation of User Data

we know this issue for 2.2.2.10 and has released 2.2.2.12 to fix it. Unfortunately it got reintroduced with 2.2.3, we’ll release a new version today 2.2.4 to make sure it’s fixed.