Yes for both Google Play and App Store it’s all self reported. Some developers are fully transparent, some will lie, and some may not be realizing that while they may not be collecting anything, the libraries they are using are.
Yeah, I work closer to advertising and data collection, the answer here is definitely yes, for example I guess there are nginx logs with IP addresses, but I'm not actively collecting or processing them.
I answered no to the question since so much of the discussion around this has moved to questions about which advertising IDs are collected, none of which I'm collecting.
> The developer says this app doesn’t collect user data
In theory, can someone flag their app like this but still collect user data? It just caught my eye since the emphasis is on “developer”.