Google requires both an in-app deletion flow and a publicly accessible web page where a user can request deletion even without the app installed.
Why apps actually get flagged
Apps that only offer deletion via a support email, or that have an in-app flow but no equivalent web page, are the most common cause.
A real example
"Your app allows users to create an account but does not provide an adequate account deletion option."
The short version, in more detail
Google Play requires apps that let people create an account to also let them request deletion of that account and its data, both inside the app and through a web link that works without installing the app. The web link is declared in Play Console alongside the Data Safety form. Mismatches between what a developer declares in Play Console and what the app and website actually do are a frequent source of policy warnings.
What this guideline covers
Apps that let users create an account from within the app.
An in-app path for users to start account and data deletion.
A public web resource where users can request deletion, including those who no longer have the app installed.
How deletion is declared in the Data Safety section of Play Console.
Whether the described process matches what really happens to the data.
What usually triggers this rejection
The app supports account creation but has no in-app way to start deletion.
The web deletion link is missing in Play Console, or the page requires logging in to the app to see it.
The page only offers to deactivate the account or tells users to email someone with no clear process.
The Data Safety form says data can be deleted but the described process does not exist.
Deletion removes the account but keeps personal data without explaining why.
How reviewers evaluate it
Reviewers compare the declaration in Play Console with the app and with the web page.
They test whether deletion can be started in the app and whether the web link works for a non-user.
They check that the deletion language in the Data Safety form matches the actual process.
Enforcement can come from automated checks as well as manual review.
Common misunderstandings
The web link is not optional. Having only an in-app option is not enough for apps with accounts.
A support email address on its own is generally not treated as a deletion mechanism.
Apps with no account creation are generally outside this requirement.
Common questions
Does this apply to apps with guest mode only?
If people cannot create an account, the requirement generally does not apply. If they can, it does.
Where is the web link entered?
In Play Console, in the data deletion section connected to the Data Safety form.
Can some data be kept after deletion?
Google recognises that some data may need to be retained, such as for legal reasons, and expects that to be disclosed.
Platform rules change often. This page is a plain-language explanation written by AppReviewFix, not official guidance. Check the current Google Play Developer Policy Center for the exact wording.
Got this exact rejection?Paste it in and get a diagnosis specific to your app, free.