有關「小鴨幹線」暫被下架

小鴨作者分別在11月2日，9日及14日，收到類似以下的通知，指「小鴨幹線」新增，須使用裝置管理員鎖屏權限的攔截後鎖屏功能，違反Google的deceptive device settings changes政策，並即時將「小鴨幹線」下架。

該功能須由用戶自行在設定內開啟，開啟掣的位置已附有清楚說明，但Google(bot?)第一次email首先要求在Google Play內加入“This app uses the Device Administrator permission.”字句。

Hi Developers at Headuck,

After review, Headuck Call Blocker / Caller ID DEV (HK), com.headuck.headuckblocker.dev, has been removed from Google Play because it violates the deceptive device settings changes policy.

You must explain to users why you are requesting the ‘android.permission.BIND_DEVICE_ADMIN’ in your app. Apps must provide accurate disclosure of their functionality and should perform as reasonably expected by the user. Any changes to device settings must be made with the user’s knowledge and consent and be easily reversible by the user.

Next Steps

1. Read through the Deceptive Device Settings Changes policy for more details, and make sure your app complies with all policies listed in the Developer Program Policies.
2. If you don’t need the BIND_DEVICE_ADMIN permission in your app:
   • Remove your request for this permission from your app’s manifest.
   • Sign in to your Play Console and submit the modified, policy compliant APK.
3. Or, if you need the BIND_DEVICE_ADMIN permission in your app:
   • Include the following snippet in your app’s store listing description: “This app uses the Device Administrator permission.”
   • Provide prominent user facing disclosure of this usage before asking the user to enable this permission within your app. Your disclosure must meet each of the following requirements:
     • Disclosure must be displayed in normal course of usage of your app. Your users should not be required to navigate into a menu or settings to view disclosure.
     • Disclosure must describe the functionality Device Admin permission is enabling for your app. Each security policy used with the Device Admin request must be declared in your disclosure, and each policy must be accompanied with justification for the request.
     • Disclosure cannot only be placed in your privacy policy, terms of service or end user license agreement (EULA).

If approved, your app will again be available with all installs, ratings, and reviews intact.

Regards,
Nilay
Google Play Review Team

這項要求已立即辦妥並重新獲上架。但其後分別2次收到一式一樣(但由不同Reviewer署名及highlight不同段落)的通知，11月9日highlight了”Or, if you need the BIND_DEVICE_ADMIN permission in your app”，意義不明，在修改Google Play字句以致連大細楷都符合“This app uses the Device Administrator permission.”字眼後即重新獲上架。

但11月14日又再三收到同一email，這次highlight了”Provide prominent user facing disclosure of this usage before asking the user to enable this permission within your app. Your disclosure must meet each of the following requirements”，這段更含糊的字句。目前只能估計是因該選項是在設定之內，不是”normal course of usage”，被認為是有意隱藏(但攔截App大部份人都是設定後就不再理會??)，或解釋還不夠詳盡，如沒有用特定字眼(Google或許已是由AI bot負責監控，這種可能較大)。

作者多次透過Google developer網頁提交要求希望得到進一步指引，卻只收到似是bot的標準回覆(即重覆該政策一次)或沒有回覆(一如Reddit androiddev常提及的求助無門經驗)，似乎沒有方法接觸到有common sense的真人澄清問題。

目前，用戶若要使用小鴨，請在此頁下載。由於重覆違反政策會被永久刪App，若未能澄清問題，可能只能在blog發放有鎖屏功能的版本，而在Google Play版本則刪去該功能。

更新: 11月30日已在Google Play 上架移除了鎖屏功能的版本，而在此blog可繼續下載沒有刪減該功能的版本。