Sent a http request containing customer phone number variable

Topic summary

A user is attempting to send customer phone numbers via HTTP request through Shopify Flow to an external SMS marketing platform when orders are fulfilled.

Core Issue:

  • The HTTP request successfully sends, but customer phone number variables export as NULL
  • Only the store’s phone number (non-protected data) exports successfully
  • The user tested 3 different customer phone number variables—all returned NULL

Suspected Cause:
The phone numbers appear to be protected/sensitive data that Shopify Flow blocks from exporting for compliance reasons.

User’s Concern:
While manual customer data export and import to the SMS platform is possible, they seek an automated solution for long-term scalability. They acknowledge this highlights that customer data protection may not be as robust as expected, since manual exports remain available.

Current Status:
The discussion remains unresolved with no clear workaround identified. Screenshots were shared showing the NULL export results and available phone number variables in Flow.

Summarized with AI on November 11. AI used: claude-sonnet-4-5-20250929.

Hello guys,

I am trying to send through a flow a http request, when an order is fullfilled, to a sms marketing platform.
The platform is cheaper than other apps and has higher success rate.

All is good, the request is sent, but the phone number of the customer is exported as NULL.

My guess is because it is sensitive data.

Can you please help me export it?
Thank you

Thank you,
Fabian

1 Like

If you log the fulfillment details, does the phone number show as null? Possible that you might need to snag it from the order or customer object.

1 Like

Hi Kalen,

No, it won’t allow me as you can see in the print attached.
I added 3 phone variables I was able to find + the shopify store phone variable, which is not protected.

It logged out just the store phone, and the other 3 were logged out NULL.

Anyone has any idea how to stay compliant and log them out?

It’s not like I can’t do an export with all my customers, import them in a sms marketing platform and spam the hell out of them.
But that is not the point, this is not a solution for long term growth.

The purpose I am writing this is to make you see that there’s no real protection to the customer data.

It’s just a matter of allowing me to do it automatically.

Thank you

1 Like

Weird!