At Shopify, we require data minimization practices as part of our privacy by design approach to commerce. To reinforce this, APIs will now redact customer personal data by default and allow you to apply for necessary access to customer personal data as needed to provide intended app functionality to merchants. Learn more about how we approach data protection.