App Store & Play Store Compliance Review

We run a B2B marketplace connecting local mobile retailers with customers. The app is built; before we scale we need a security and data privacy review covering both the Apple App Store and Google Play. This is review and advisory, not development. You assess against both stores' current policies plus the security baseline expected of an app handling merchant accounts, customer data, and transactional flows. Scope: Store compliance: App Privacy label / Data Safety form, in-app and web account deletion, App Tracking Transparency, Sign in with Apple parity, target API level, permissions, privacy manifest. Security baseline: TLS, secure token/secret storage, hardcoded credentials, server-side authorisation (IDOR), rate limiting, release-build logging. Privacy: data minimisation, consent, data subject requests, retention, third-party SDK data sharing. Deliverable: a 2 to 3 page document with prioritised, practical actions our dev team can execute directly. State what to do and which area it touches (mobile, backend, listing). Flag store-blocking items separately from the general baseline. No boilerplate. You should have hands-on experience getting apps approved on both stores (ideally apps handling personal or financial data) and solid mobile security knowledge (OWASP MASVS or similar). To apply: name one common reason marketplace apps get rejected or removed by either store, and how you would check for it. Skip generic intros.