Is it possible to gain order data without customer data permissions for custom apps?

[Mike-H]

Looking for some help if possible please

We built a custom app that requires order data (products, price and quantity), but it does not need customer data. The app creates products and then tracks orders placed including these products using the app.

When installing the app it asks for customer data permissions, which we want to remove:

Is this possible with custom apps?

We're thinking it is not possible to gain order data without automatically including customer data. https://shopify.dev/docs/apps/launch/protected-customer-data

We used REST, would GraphQL change this?

Any help or experience with this would be greatly appreciated, thanks!

[heddykhalifa]

Hey Mike-H,

Heddy from Gameball: Loyalty Program & VIP here!

To gain order data without accessing customer data, you can use Shopify’s GraphQL API to retrieve specific order-related details. The orders query allows you to fetch data like product IDs, quantities, and shipping methods while excluding personal customer information. This ensures privacy while still providing valuable insights into sales and order trends. Structuring the query to only pull relevant order data is the key.

[Mike-H]

Thank you so much for the reply Heddy!

Can I please confirm that using GraphQL API instead will remove the customer permission during installation even if its a custom app? I just wanted to confirm before I make these changes please.

Thanks!

[Mike-H]

Can you please confirm that this will still work for custom Shopify apps?

We have changed the REST order API to GraphQL API but still seeing customer information when installing:

Maybe we have missed something?

Thanks!

[Mike-H]

If anyone is interested, it turns out this is not the case.

We changed REST to GraphQL but it still resulted in having the app request customer data access during installation.

If anyone else knows of any other solutions to this problem, please let me know, thanks!