I think they are getting rejected for not mentioning the url of their api?
Your thought is that mentioning that the necessary data is sent to https://api.pushbullet.com instead of just "Pushbullet Servers" might help?
I had not considered this but it is an interesting idea.
In our case, Google was claiming we were sending contact information to a URL corresponding to our static landing page.
In fact, we didn't even upload contact information anywhere.