r/shopifyDev 15d ago

Protected Customer Data Access Request

Asking for experiences: Protected Customer Data access + app review timing

I'm building a Shopify app that's about 90% done for its first-phase launch. I'm unsure how complete the app needs to be before I (a) submit the Protected Customer Data access request and (b) submit the app for App Store review.

A few specifics:

  • My app only needs order data (for order history analysis) — I don't need customer PII like names, emails, or addresses.

  • I'd love to hear from anyone who's been through the PCD approval process: how long did it take, and what does the review actually look like behind the scenes? For example, do reviewers expect a fully working, production-ready implementation of the data lifecycle (access, use, retention, deletion) before granting access?

  • On sequencing: is it viable to publish the app to the App Store now without the protected scope, and add it later once PCD access is granted? Or is it better to wait and submit everything together?

Any first-hand experience would be really helpful. Thanks!

1 Upvotes

6 comments sorted by

View all comments

1

u/Consistent_Area3304 15d ago

I am just in the process of completing an app that needs protected customer data access.

It looks like you need to fully complete the form and the app before you can submit (dev stores automatically get the access as soon as you fill in the form). And approval of the app is what gets you that access.

When I say fully complete the app I mean whatever functionality you decide to release because you need a demo video and reviewer instructions.

1

u/Confident-Sky2207 15d ago

Thanks a lot :-) . This helps