Customer data exposed

[TheNails]

There is a bug that exposes customer data to service providers in the web version

I'm not sure how to file a bug report to square so here it is

Here are permission settings for Service Provider:

In the settings above: Customer data should be hidden for Service Providers

When logged in as Service Provider in the Appointments iOS app, it works as expected, phone and email are hidden with dots:

When logging in web version in Safari or clicking an appointment link in SMS notification message for Service Provider (that are sent for every new appointment) you can see the phone number and email of the customer (under red paint there is real data exposed, painted over for privacy reasons)

[Minion]

Hey @TheNails , has anyone reached out to you about this?  Seems like it should be looked into. 

[_Violet]

Hi there @TheNails - Thanks for reaching out to us here on the Square Seller Community. My apologies that this has not been addressed by one of our team members sooner.

I have reached out to our Advanced Support Team to see if they can confirm that this is indeed a known issue with Square Appointments or not.

Once I receive an update, I'll be sure to reach back out to you here. We appreciate your patience!

[_Violet]

Hello again @TheNails - Alanah here following up from yesterday.

I reached out to our Square Appointments Support Team and they have confirmed this is currently a known issue within our system. They have asked that I direct you to contact our Support Team in order to get this issue reported to our Engineers for further investigation.

When you have a moment, please contact our Support Team here. 

I hope this information is helpful but please do let us know if you have any additional questions.

[TheNails]

Ok thanks, I will contact the Support Team