I’m developing a Shopify Parters App that requires access to protected customer data (like names, emails, and order history). Currently, this access requires manual approval—even when testing in a dev store.
By definition, sandbox environments are meant to allow unrestricted testing. Without access to protected scopes or simulated data, dev stores become little more than restricted production mirrors, which defeats the purpose of a true sandbox.
Most platforms (Stripe, AWS, PayPal, etc.) offer full API access or fake data in their test environments. Shopify should do the same to improve the developer experience without compromising production security.