Does app privacy for bare workflow require "Yes" and "Device ID"?

According to the docs, you must select “Yes, we collect data from this app” and “Device ID”. Is this true for the bare workflow that doesn’t use expo-notifications, expo-facebook or expo-updates, Facebook Ads or Google AdMob?

No, that’s only if you use those modules. But I should note (especially for anyone finding this question in the future) that especially for the bare workflow, we cannot say for certain whether or not you need to select “Yes” or “No” to Apple’s questions there. The best thing to do is to research into the libraries your app does use and go from there