Google removed app from playstore

Google removed app from playstore

One of our apps has been removed from Playstore by Google.
//Sent by Google Play Team
REASON FOR REMOVAL: Violation of section 4.3 of the Developer Distribution
Agreement. We classify a user's contacts as private and confidential
information. Apps which upload a user's contacts to a service without
making this clear to the user and obtaining the user's explicit consent
are regarded as being in violation of section 4.3 of the DDA.
We are getting contact information from users phone and sending the list
of contacts to our server through an HTTP API. However at the server we
are not storing any of those information and using only for some complex
operations.
4.3 DDA agreement says we should have a separate user-agreement and opt
user to agree to those Terms & Conditions.
Can we solve this problem by have a separate EULA and prompt user to agree
upon those ? Please let me know the right solution because I don't want to
risk my client's developer account getting deleted.