System76, Inc review for Mailchimp: Email & SMS
Aug. 8, 2022
Shortly after we set up this integration for a test store we started receiving complaints from our customers that their emails were getting spam. These were people who set up aliases at their own domains like [email protected], so it was plain who was compromising their emails. We went through several internal audits trying to figure out where these emails were being exposed but found nothing until a new developer came along and asked about a weird web hook installed on our mailchimp account that posted user data to app.shopsync.io. shopsync.io is a dead domain but the app subdomain does return a 200/OK when you hit it. We removed the app from Shopify and that removal deleted the web hook from Mailchimp. We haven't received any customer complaints for accounts created since we removed this integration.
Hi System76, we appreciate the feedback. We're trying to get our heads around how the app was sending spam to your customers as described. The integration between Mailchimp and Shopify syncs data from your store to a Mailchimp Audience; we don't send any emails on your behalf. The domain "shopsync" is a company we acquired last year, whose technologies are still the fundamentals around the app. We'd welcome further dialogue about this matter by contacting us via support.