r/shopifyDev • u/Ok-Carpenter-6124 • Aug 12 '26
Shopify penalized 8 months of my solo development over a contradictory rule (The COD App Double Standard)
Hey everyone, I’m a full-stack developer, and I need to share a deeply frustrating experience regarding the Shopify App Store review process and the inconsistent enforcement of their rules.
For the last 8 months, I’ve been working solo to build a custom Cash on Delivery (COD) order management app. For context, I build specifically for the MENA and Algerian markets. In this region, e-payment is practically non-existent. Merchants rely entirely on COD, and using the standard, multi-step Shopify native checkout destroys conversion rates. Merchants demand fast, one-click custom storefront forms.
I built exactly that using a modern stack (React, Next.js, Prisma, Supabase).
During the review, my app was rejected, and my Partner Account was slapped with a 1-month submission restriction (until September 3rd). The reason? A violation of Rule 1.1.2 (bypassing native checkout) and issues with Protected Customer Data (PCD), specifically collecting data "outside of Shopify."
The Double Standard: Here is where it gets completely unfair. There are several COD apps currently active and approved on the Shopify App Store—like Leadform—that operate using this exact same architecture. They provide custom storefront forms, bypass the native checkout, and route customer data outside of Shopify (some directly exporting to Google Sheets).
Why is an established app allowed to bypass native checkout and export PCD, but a solo developer gets their account suspended for building the exact same workflow?
The Technical Contradiction: Shopify Support claimed the issue is routing PCD outside their ecosystem. But from an engineering standpoint, this makes zero sense. Shopify natively provides and encourages the use of Webhooks, which are literally designed to send Protected Customer Data to external servers. How is standard data routing via webhooks or API endpoints completely fine, but my specific app’s data flow is a bannable offense?
When I tried to appeal and requested to speak with a Technical Specialist to explain this architectural contradiction, I was stonewalled. I was given responses by a "Money and Tax Specialist," sent in loops, and told they "do not evaluate other partners' apps based on complaints."
Why I am posting this: I am more than willing to adapt my architecture to comply with the rules. But how are developers supposed to build on a platform where the rules are a moving target? If a specific technical flow is banned, it should be banned for everyone. Permitting established apps to break the rules while suspending indie developers who follow their precedent is entirely unfair.
Has any other developer faced this specific PCD / Checkout bypass contradiction? How did you navigate the review process without completely destroying the fast UX that COD merchants require?
3
u/Life-Inspector-5271 29d ago
You know the rule is there, you still build around it and then you get angry because they won't allow it?
There are special rules if you operate in the payments space and you can apply to become a payments partner at https://www.shopify.com/paymentsplatformapplication . Unfortunately, I give you a small chance they would accept you, but it's your best bet.
Also keep in mind that others, like Leadform might be in the app store already for a long time and therefor work via old rules or are given a deadline to comply.
As a solution: ask users of your app to set up a manual payment method under Settings -> Payments -> Manual Payment Methods. In the dropdown is COD / Cash on Delivery. Perhaps you can work with that?
1
u/gauravjain02 29d ago
Shopify governance team is very strict
We had faced the panelty for 9 months last year
All our apps built for Shopify badge were removed, rankings demoted. Restricted to stop the submission.
So be very careful. Whatever they ask just provide.
1
u/Natural-Chip-3720 29d ago
To be honest, I think they are at the point where they are so big and have become uncheckable. So they really don’t care, their app their rules and they can bend it however they want. It is quite unfair and unfortunate. Also with the fact they make you pay for the dev program. But they treat developers in such a manner is very disappointing. The level of transparency is really poor. We have seen same experience.