how to write a udev rule to remove a tag?

From version 217 onwards, is possible to do that using:

TAG-="uaccess"

For older versions, sadly it isn't. So you can workaround adding some conditional that would prevent the tag from being added:

KERNEL=="sdb", GROUP="daemon", OPTIONS+="last_rule"

In this case, you set the permissions and then nothing else can be added.