I recently received many mails from google for many of my apps.
The email content is:
Hello Google Play Developer, Our records sho
Hello Google Play Developer,
Our records sho
There is a yellow comment near the field privacy policy URL is which permission cause this in your apk.
However from first review of your Manifest READ_PHONE_STATE and GET_ACCOUNTS are definetly permissions that need a policy URL.