I am developing an app, and I noticed that on installing the app, it says that the app needs access to view personal data. However, the app does not use any personal data. Where are these settings for the app located at? Scopes in the toml file are:
My problem exists because of the read_shipping scope, which can access Fulfillment data and thus customer addresses. I assume in your case read_orders has also access to customer data.