It took some back and forth, but I did get them to sign off on the app. If you want to see the back and forth, here you go.
Summary
I responded to FB with my fix, they emailed me back saying,
We have received your email and we apologize for all the inconveniences caused to you, while reviewing, we found that your privacy policy doesn’t explain how users can request their complete personal data deletion (collected by the app) and contact us details in the Privacy Policy hence we request you to update your privacy policy to include this information so that we will review the app accordingly.
Your privacy policy only showing how user’s can delete their account. We deletion of personal data that’s being collected.
Example : Accounts on this site can be anonymized or deleted at the users request. Note : account deletion will lead to deletion of personal data and cannot be recovered.
I responded asking for more clarification.
They replied,
We wanted to follow up on our previous conversation. Your application is in its final review phase. However, we need to have statement as how users can request their complete “personal data deletion” (collected by the app) and contact us details in the Privacy Policy hence we request you to update your privacy policy to include this information so that we will review the app accordingly.
My guess, I need to modify my policy to state,
Accounts on this site can be anonymized or deleted at the users request. Contact the administrator @web, for details. Please note, account deletion will lead to the deletion of all personal data and it cannot be recovered.
This is what I needed in the policy for them to sign off. Basically, they wanted the last sentence in there.
Accounts on this site can be anonymized or deleted at the users request. Contact the administrator @admin, for details. Please note, account deletion will lead to the deletion of all personal data and it cannot be recovered.
I appreciate the help and hopefully this will help someone else down the road.