Comment by kitx

Appears that (wording is somewhat vague) apps which only store user data on the device do not need to go through this external security assessment.

Agree that this is Google pushing their security costs onto developers and effectively killing bootstrapped SAAS apps.