Starship
starship / search / amazon-associate-connector

Audit report

Amazon Associate Connector

WatchReach : moderate

by InfoShore Software Private Limited · Finding and adding products · Shopify App Store

Finding and adding products
Risk level
Watch
Executive summary

Import Amazon products to Shopify store and earn money

Key insights

  • ◆Long-running listing (since 2017) but very low review volume (13) suggests limited adoption.
  • ◆Privacy policy appears to be a recycled template referencing 'Ebay Importer' - signals weak privacy governance.
  • ◆No 'Built for Shopify' badge; competing apps in the same category do have it.
  • ◆Write scopes on products/inventory/collections are justified by the import use case but carry significant supply-chain risk.

Top findingsview all

  • High
    Broad write scopes on product, inventory, and collections
  • High
    Privacy policy is generic and references the wrong product
Synthesis

Analysis summary

Import Amazon products to Shopify store and earn money

Key insights
  • ◆Long-running listing (since 2017) but very low review volume (13) suggests limited adoption.
  • ◆Privacy policy appears to be a recycled template referencing 'Ebay Importer' - signals weak privacy governance.
  • ◆No 'Built for Shopify' badge; competing apps in the same category do have it.
  • ◆Write scopes on products/inventory/collections are justified by the import use case but carry significant supply-chain risk.
  • ◆India-based publisher transferring data to US/Canada without explicit GDPR transfer mechanisms.
  • ◆No public CVEs or breach history found for the publisher.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_customers
High

View store owner contact info (name, email, phone, address) - PII access.

write_products
High

Required to import Amazon products into the catalog; high blast radius if compromised.

write_inventory
High

Required for inventory sync; allows quantity tampering.

write_collections
Medium

Manages product collections during import.

read_locations
Low

Used to assign inventory to fulfillment locations.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
www.infoshore.biz
TLS grade
unknown
HSTS
Missing
CSP
Missing

Publisher corporate site returns plain HTTP 200 via Apache with no HSTS or CSP headers. App backend at apps.infoshoreapps.com is fronted by Cloudflare (returns 403 on direct GET, NEL configured).

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy is generic, appears templated from another app (Ebay Importer), lacks sub-processor list, no certifications referenced. Cross-border transfers acknowledged without SCC/adequacy mechanism.

Privacy policy
Track record

Publisher reputation

Publisher
InfoShore Software Private Limited
Verified Shopify Partner
No
Years active
9
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.