Facebook SDK: Data safety form answers

If your Android app includes Facebook Android SDK (core, app events, login, share) from Meta, its data counts as data your app collects. Based on what the SDK does, it collects and shares app interactions, device or other IDs, crash logs.

Matched dependencies: com.facebook.android:facebook-*.

No official vendor disclosure

This entry is inferred from the SDK’s behavior and Google’s definitions, not from a vendor data-safety page (see source, checked 2026-10-26). Check it against your own use of the SDK.

What to declare

Data type	Collected	Shared	Ephemeral	Purposes
App interactions Automatic app events (install, launch) unless AutoLogAppEventsEnabled=false	Yes	Yes	No	Analytics; Advertising or marketing
Device or other IDs Advertising ID (AD_ID permission added since SDK 13.0.0)	Yes	Yes	No	Analytics; Advertising or marketing
Crash logs Facebook SDK crash reports (SDK crashes only, for Meta’s internal use)	Yes	Yes	No	Analytics

Whether each type is required or optional for users depends on your app: optional only if users can turn it off and the app honors that.

Only declare these if they apply

Data type	When	Collected	Shared	Purposes
Purchase history	Only if the app sells in-app products and automatic purchase logging is on (the default)	Yes	Yes	Analytics; Advertising or marketing
Name	Only with Facebook Login, if the app sends the profile off-device	Yes	No	App functionality; Account management
Email address	Only with Facebook Login and the email permission, if sent off-device	Yes	No	App functionality; Account management
User IDs	Only with Facebook Login, if the app sends the user ID or token off-device	Yes	No	App functionality; Account management

The skill lists these under Needs your review and checks the code for the condition (for example a setUserId call) before you include them.

Notes

Meta publishes no Play Data safety guidance (the Play SDK Index lists it as “Not provided”); this is inferred from Meta’s automatic event logging docs. App events (install, launch, Google Play purchases) and app metadata are logged automatically unless AutoLogAppEventsEnabled is false; since v13 the SDK adds the AD_ID permission. Meta uses this data for its own ads products, so it is treated as shared.

The CSV rows this sets

These are the rows of Google’s Data safety CSV that Facebook SDK turns to true (or false for the ephemeral question). Columns: question ID, response ID, value. You also answer the required/optional row for each type.

PSL_DATA_TYPES_APP_ACTIVITY,PSL_USER_INTERACTION,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_COLLECTED,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_SHARED,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:PSL_DATA_USAGE_EPHEMERAL,,false
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:DATA_USAGE_COLLECTION_PURPOSE,PSL_ANALYTICS,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:DATA_USAGE_SHARING_PURPOSE,PSL_ANALYTICS,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:DATA_USAGE_COLLECTION_PURPOSE,PSL_ADVERTISING,true
PSL_DATA_USAGE_RESPONSES:PSL_USER_INTERACTION:DATA_USAGE_SHARING_PURPOSE,PSL_ADVERTISING,true
PSL_DATA_TYPES_IDENTIFIERS,PSL_DEVICE_ID,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_COLLECTED,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_SHARED,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:PSL_DATA_USAGE_EPHEMERAL,,false
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:DATA_USAGE_COLLECTION_PURPOSE,PSL_ANALYTICS,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:DATA_USAGE_SHARING_PURPOSE,PSL_ANALYTICS,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:DATA_USAGE_COLLECTION_PURPOSE,PSL_ADVERTISING,true
PSL_DATA_USAGE_RESPONSES:PSL_DEVICE_ID:DATA_USAGE_SHARING_PURPOSE,PSL_ADVERTISING,true
PSL_DATA_TYPES_APP_PERFORMANCE,PSL_CRASH_LOGS,true
PSL_DATA_USAGE_RESPONSES:PSL_CRASH_LOGS:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_COLLECTED,true
PSL_DATA_USAGE_RESPONSES:PSL_CRASH_LOGS:PSL_DATA_USAGE_COLLECTION_AND_SHARING,PSL_DATA_USAGE_ONLY_SHARED,true
PSL_DATA_USAGE_RESPONSES:PSL_CRASH_LOGS:PSL_DATA_USAGE_EPHEMERAL,,false
PSL_DATA_USAGE_RESPONSES:PSL_CRASH_LOGS:DATA_USAGE_COLLECTION_PURPOSE,PSL_ANALYTICS,true
PSL_DATA_USAGE_RESPONSES:PSL_CRASH_LOGS:DATA_USAGE_SHARING_PURPOSE,PSL_ANALYTICS,true

Detect it automatically

data-safety-from-code finds Facebook SDK in your build.gradle or version catalog, adds these answers with a link to the source, and merges them with every other SDK and with what your own code sends. You get a CSV to import and a report showing where each answer comes from.

Claude Code

Inside a Claude Code session

/plugin marketplace add sanikantv/data-safety-from-code
/plugin install data-safety-from-code@data-safety-from-code

Or from your shell

claude plugin marketplace add sanikantv/data-safety-from-code
claude plugin install data-safety-from-code@data-safety-from-code

Codex · Cursor · Copilot

skills CLI (works with most agents)

npx --yes skills add sanikantv/data-safety-from-code --skill data-safety-from-code -y

Copy the folder

Personal skill (or copy into your project's .claude/skills/)

git clone https://github.com/sanikantv/data-safety-from-code.git
cp -r data-safety-from-code/skills/data-safety-from-code ~/.claude/skills/

Other analytics SDKs

• Firebase Analytics data safety
• Firebase Performance Monitoring data safety
• Mixpanel Android SDK data safety

Related: collected vs shared · how to fill the Data safety form · all SDKs

Want the form filled from your own code, with evidence? Install the skill. If this page helped,star the repo on GitHub.