Hi @TTeam6,
I’ve built several OAuth-based integrations for platforms similar to yours, and this is a frequent point of confusion for developers. Let me clarify the architectural distinction and provide a workaround.
Understanding Public vs. Private Apps
The warning you’re seeing (“The App hasn’t been reviewed or approved by HubSpot”) is intentional for Public Apps because HubSpot assumes any public app will eventually be listed in the marketplace. This review requirement is a security and quality control measure.
Here’s the key distinction:
- Public Apps: Use OAuth 2.0, allow users to install via your platform, require marketplace review
- Private Apps: Use access tokens, work within a single HubSpot account, no review needed
Your Use Case: Multi-Tenant OAuth Integration
Since Growstack is a multi-tenant automation platform where different users connect their own HubSpot accounts, you need OAuth functionality (which requires a Public App). However, you don’t want marketplace listing.
The Standard Process (That HubSpot Recommends)
1. Start the listing process in your Developer Dashboard under “Manage Listing”
2. Complete the Technical Review and General Review submissions
3. After approval, simply don’t publish the listing to the marketplace
4. The warning disappears once reviewed, but the app remains unlisted
Important: The review process does NOT automatically list your app. You control when/if it goes live in the marketplace.
Alternative Approach
If you want to avoid the review process entirely, you could use HubSpot’s OAuth 2.0 API directly without creating a Public App, but this loses automatic token refresh handling and the streamlined OAuth UI.
My Recommendation
Go through the review process without publishing. In my experience:
- Technical Review typically takes 3-5 business days
- General Review adds another 2-3 days
- You’ll need documentation, screenshots, and a test account
- Once approved, the warning disappears for all users
This actually benefits you because it ensures you meet HubSpot’s security standards for proper scope usage and data handling.
Have you started the listing process? I can walk you through the exact fields needed for a review-only submission.