I purchased TrustReviews in May for $95 annually. Last week, when checking for pending reviews, I could not access that feature as the app wanted access to ALL private information for customers: Name, address, phone number, IP address, Orders. It also wanted access granted to ORDERS AND INVENTORY OF MY STORE! No way am I sharing my customers private info. I deleted the app from my store. Here is what I was presented with:
TrustReviews needs access to:
View personal data
CustomersName, email address, phone number, physical address, geolocation, IP address, browser and operating system
View and edit store data
Edit ordersOrder fulfillments
This is Outrageous and Unacceptable! I want a refund!
For any refund request, you will need to directly reach to the app developer so, they can further check your account with them and process the refund if possible.
You will probably find that the permissions being asked for are phantom. Most app stores group all data for a category – like the customer data above – and present that as if the app wants or needs access to it, when in reality it only needs access to, say, a customer email address. In other words, shopify (and apple and google) do a crappy job of making each aspect of a store that might be required to be accessed by an app, an individual item. So it throws out the data needed vomit you see where it really probably only needs one or two things.
In this age of increased privacy, not having extreme granularity on what an app can ask for – and thus grant just that by the shop owner – truly is very 1990.
I would contact the devs of the app to ask nicely which of the dozen or so items that fall under the permissions being asked for are actually utilized by the app. Then make your decision if that is too much. This of course does not remove the fact an app developer could in an update decide it wanted, say, phone numbers too, but generally you’ll find the developer will tell you the apps really don’t want or need all it asks for and its just the way Shopify permissions group things. Could be item-by-item but for some reason that is too onerous to implement. Blame the service host for that. The dev is restricted to asking for the group of permissions that include the one or two or three it actually needs.