thread Re: Customer data exposed in Appointments & Bookings

Customer data exposed

t_n_s — Mon, 22 Sep 2025 14:33:01 GMT

There is a bug that exposes customer data to service providers in the web version

I'm not sure how to file a bug report to square so here it is

Here are permission settings for Service Provider:

In the settings above: Customer data should be hidden for Service Providers

When logged in as Service Provider in the Appointments iOS app, it works as expected, phone and email are hidden with dots:

When logging in web version in Safari or clicking an appointment link in SMS notification message for Service Provider (that are sent for every new appointment) you can see the phone number and email of the customer (under red paint there is real data exposed, painted over for privacy reasons)

Re: Customer data exposed

Minion — Sun, 28 Nov 2021 12:36:54 GMT

Hey @t_n_s , has anyone reached out to you about this? Seems like it should be looked into.

Re: Customer data exposed

_Violet — Sun, 28 Nov 2021 13:52:26 GMT

Hi there @t_n_s - Thanks for reaching out to us here on the Square Seller Community. My apologies that this has not been addressed by one of our team members sooner.

I have reached out to our Advanced Support Team to see if they can confirm that this is indeed a known issue with Square Appointments or not.

Once I receive an update, I'll be sure to reach back out to you here. We appreciate your patience!

Re: Customer data exposed

_Violet — Mon, 29 Nov 2021 18:36:14 GMT

Hello again @t_n_s - Alanah here following up from yesterday.

I reached out to our Square Appointments Support Team and they have confirmed this is currently a known issue within our system. They have asked that I direct you to contact our Support Team in order to get this issue reported to our Engineers for further investigation.

When you have a moment, please contact our Support Team here.

I hope this information is helpful but please do let us know if you have any additional questions.

Re: Customer data exposed

t_n_s — Tue, 30 Nov 2021 00:06:09 GMT

Ok thanks, I will contact the Support Team