The most common rejection reason in 2026 is Data Safety section misrepresentation. Google now uses automated scanning to verify declared data collection against actual SDK behaviour.