Promoting user privacy and business security with updated Play policies

Posted by Bennett Manuel, Group Product Manager, App & Ecosystem Trust

We strive to make Google Play the safest and most trusted experience possible. Today, we’re announcing a new set of policy updates and an account transfer feature to promote user privacy and protect your business from fraud. By providing better features for users and easier tools for you to integrate, we are making Building secure apps made easy So you can focus on creating great experiences.

We’re also expanding our features to help you manage new contact and location policy changes, so you have a smoother, more predictable app review experience. As of October, Play Policy Insights in Android Studio can help you proactively identify whether your app should use these new features and guide you on the exact steps to take. Additionally, new pre-review checks will be available in the Play Console starting October 27 to flag potential Contacts or Location permission policy issues so you can fix them before submitting your app for review.

Here’s what’s new and how you can prepare.

Contact Picker: A privacy-friendly way to access contacts

Android is introducing the Android Contact Picker as the new standard for accessing contact information (for example, for invitation, sharing, or one-time lookup). This picker lets users share only with the specific contacts they want to share, helping to build trust and protect privacy. In addition to this tool, we are also updating our Policy Require that all applicable apps use pickers, or other privacy-focused alternatives sharesheetAs the primary way for users to access contacts. READ_CONTACTS This will be reserved for apps that can’t function without it.

what you have to do

• If your app asks for access to contacts for features like sharing or inviting, you should update your code to use the picker and remove READ_CONTACTS Fully allowed (if targeting Android 17 and above).
• If your app requires full, persistent access to a user’s contact list to function, you must justify this need by submitting a Play developer declaration in the Play console. This form will be available before October.

Location button: a more privacy-friendly way to access location

Android is introducing a new, streamlined Location button that will make it easier to request precise data for one-time actions like finding a store or tagging a photo. This feature replaces complex permission dialogs with a single tap, helping users make clear choices about how much information they share and for how long. we are updating our Policy Apps need to use this button for one-time precise location access, unless they need persistent, always-on location access. This creates a faster, more predictable experience for your users and reduces the hassle of traditional permission requests.

what you have to do

• Review your app’s location usage to make sure you’re requesting the minimum amount of location data necessary for your app to function.

• If your app targets Android 17 and above and uses precise location for separate, temporary actions, apply by adding the Location button onlyForLocationButton Flag in your manifest.

• If your app requires a consistently precise location to function, you must submit a Play Developer Declaration in the Play Console to show why the new button or coarse location is not sufficient for the core features of your app. This form will be available before October.

Account Transfer: Protecting Your Business

You asked for a secure way to transfer app ownership during business changes and we listened. We’re launching an official account transfer feature directly in the Play Console designed to help you easily transfer ownership during sales and mergers, as well as protect your business from fraud. From May 27, this official facility will have to be used for account ownership change. This means that informal transfers (like sharing login credentials or buying and selling accounts on third-party marketplaces) that leave your business vulnerable are not allowed.

what you have to do

• Initiate any future account owner changes through the “Users and Permissions” page in the Play Console.

• Each transfer will include a mandatory 7-day security cool-down period. This gives your team time to detect and cancel any unauthorized attempts to take over your account. Look Transferring ownership of a Play Console developer account For more guidance.

what will happen next

We want to give you plenty of time to review these changes and update your apps. For more information, timelines, and a full list of Google Play policy updates we’re announcing today, please visit policy announcements Page.

Thank you for your partnership in keeping play safe for everyone.