back

by toddmorey·12y ago·view on hn ↗
Fantastic idea and fantastic hack (OnDemand VPN) to enable the banner. Two questions:

1. Do you store the bank card, address, etc. locally or on your servers?

2. Do you worry about Apple / Google replicating the functionality of this service? Seems like one of those ideas that's super clever, but really leaves me wishing it was just baked in.

2 comments
We store the shipping/payment info if you create an account. The idea behind it is that entering information on mobile is a hassle and with amberExpress you enter it once and then it works across all stores.

During the summer we went through the PCI DSS process. PCI DSS is a standard for secure handling of credit card data. This means we have to abide by a very strict set of rules of storage/usage.

At the same time, if you don't have an account all your information is volatile and disappears after the order is placed.

When it comes to 2, the truth is we wish it was baked in too. That's why we implemented it the way we did. All we can do / focus on is on building an amazing service.

Thanks for the nice words btw :)