vivo巡检出隐私问题,存在收集“监听应用安装、更新、卸载”等信息的行为,有下架风险
APP在运行时,SDK存在以下违规行为: 1、未见向用户告知且未经用户同意,在后台状态下,flutter存在收集“监听应用安装、更新、卸载”等信息的行为,非服务所必需且无合理应用场景,超出与 收集个人信息时所声称的目的具有直接或合理关联范围
堆栈信息:
java.lang.Exception
at android.app.ContextImpl.registerReceiverInternal(Native Method)
at android.app.ContextImpl.registerReceiver(ContextImpl.java:1516)
at android.app.ContextImpl.registerReceiver(ContextImpl.java:1504)
at android.content.ContextWrapper.registerReceiver(ContextWrapper.java:627)
at com.umeng.message.proguard.i.a(UPush:67)
at com.umeng.message.proguard.u.register(UPush:1559)
at com.umeng.message.PushAgent.register(UPush:101)
at com.umeng.message.UmengPushSdkPlugin.register(UmengPushSdkPlugin.java:341)
at com.umeng.message.UmengPushSdkPlugin.pushMethodCall(UmengPushSdkPlugin.java:126)
at com.umeng.message.UmengPushSdkPlugin.onMethodCall(UmengPushSdkPlugin.java:107)
at io.flutter.plugin.common.MethodChannel$IncomingMethodCallHandler.onMessage(MethodChannel.java:267)
at io.flutter.embedding.engine.dart.DartMessenger.invokeHandler(DartMessenger.java:292)
at io.flutter.embedding.engine.dart.DartMessenger.lambda$dispatchMessageToQueue$0$io-flutter-embedding-engine-dart-DartMessenger(DartMessenger.java:319)
at io.flutter.embedding.engine.dart.DartMessenger$$ExternalSyntheticLambda0.run(Unknown Source:12)
at android.os.Handler.handleCallback(Handler.java:883)
at android.os.Handler.dispatchMessage(Handler.java:100)
at android.os.Looper.loop(Looper.java:230)
at android.app.ActivityThread.main(ActivityThread.java:7839)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:526)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1034)
如未重新传包整改,平台将会对您的应用进行处埋,包括但不限于下架。
项目目前使用Flutter开发,umeng_push_sdk: ^2.2.0,umeng_common_sdk: ^1.2.7
pub.dev上 umeng_push_sdk v2.3.0 (15 months ago)、umeng_common_sdk v1.2.9(2 months ago)是否已修复了此问题,umeng_push都是15个月之前的了,umeng_common也是2个多月之前的版本了,如果升级到这两个版本对该问题的解决是否有效?如若无效,请友盟官方及时升级Flutter插件版本解决此问题。
请友盟官方务必重视此事,避免应用不合规被下架
