I think every crypto hardware wallets should do the same

[YellowSwap]

This is a progress atleast for a hardware wallet company that wants to get something done.
So, keystone decide to always bring their customers data deletions to public.

I kinda like the idea, and I believe that every crypto wallet manufacturers should start doing the same.
Once 90days have passed every data should be wiped.



Full details from Keystone below

https://x.com/KeystoneWallet/status/2117996631308288113?a=w0aPN2MTPwoxTIqwzUA&s=19

What do you guys think? 90days too long?

[Lucius]

Why are you opening a topic like this in the Bitcoin discussion? There is a board for Hardware wallets.

As for the question of whether customer data should be deleted or not - of course it would be desirable, but reality has shown us that no one deletes this data even when it is clearly stated that it will be deleted. Data is a valuable commodity, anyone who believes that someone will delete it is living in a fairy tale world.

[DubemIfedigbo001]

This is a progress atleast for a hardware wallet company that wants to get something done.
So, keystone decide to always bring their customers data deletions to public.

They're only trying to build trust again after the recent incident. If they couldn't keep to the former 180 days timeline, what's the guarantee the're going to keep to this 90 days rule. Additionally there's no where customers can verify themselves that their data was deleted apart from a graphical representation of a calendar. Nice try on building back trust.

Once 90days have passed every data should be wiped.

How do you know it was actually wiped, you are trusting blindly if there is no means to verify.

[Free Market Capitalist]

This is a progress atleast for a hardware wallet company that wants to get something done.

No, it's not.

What do you guys think? 90days too long?

What I think is that you're presenting something here as a novelty when it isn't. They've simply copied it from Trezor:

Why do you wait 90 days to delete or anonymize customer data?

After 90 days we delete or anonymize all customer data related to a purchase on our Trezor eShop. We chose 90 days because it is the shortest window that still covers the whole life of an order — delivery, returns, and any refund or replacement. After that we have no reason to keep your address or phone number.

It would be great if every HW company did the same, but this isn't something new invented by Keystone.

[eternalgloom]

Why keep logistics data for 90 days?

It should all be wiped out immediately upon confirmation of product delivery.
Because longer that data remain on server, or in any third party Shopify database, greater the risk of phishing attack and malicious link from hacker.

BTW, as FMC said, all other major hardware wallet company should also follow this policy from now on!
Otherwise, it’s just exhausting, constantly watching them play fast and loose with customer privacy.
I don't know why they keep such sensitive data stored for so long.

[Antidote47k]

It easy to announce publicly that they will delete customer data after that period but whether it will be implemented is another question. Previously they had 180 day automated deletion mechanism which they claimed to have failed, earlier when their store suffered a breach, 25,964 buyer records which contained personal information were still in their database which under its previous poilicy should have been deleted, as Lucius previously stated, these data are very valuable.

Public deletion announcements might seem useful but they should be meaningful transparency with evidence of successful deletion. Companies should explain how deletion applies to third-party processors and other copies of customer information.

[Charles-Tim]

What do you guys think? 90days too long?

This will be very good if it is done as proposed, but it will be better if the the data is erased few days or immediately the buyer confirms that he has received the hardware wallet.

I am waiting to see Trezor anonymous shipping also to know how it would be. Maybe it will be good, but I am doubting it.

[Livingleged]

What do you guys think? 90days too long?

This will be very good if it is done as proposed, but it will be better if the the data is erased few days or immediately the buyer confirms that he has received the hardware wallet.

I am waiting to see Trezor anonymous shipping also to know how it would be. Maybe it will be good, but I am doubting it.

Yes, it’s definitely going to be a good idea. Why I think they decided on the 3month time should be that it’s is the expected time that a customer should have received his order after the order is made, no matter the circumstances involved and delays that that occur during the process.

Since trezor had issues with data leaks through a third party recently,  they might also consider it I guess finger crossed.

[salad daging]

I kinda like the idea, and I believe that every crypto wallet manufacturers should start doing the same.
Once 90days have passed every data should be wiped.

90 days is still a long time to delete customer data, what about those 90 days there is another hacking event then the customer himself is the one who is at a disadvantage, I do not know if this might have been a Shopify rule that followed the local country rules? However, the manufacturer applies the same thing, not as desired after the product is received the data is immediately deleted.

I am waiting to see Trezor anonymous shipping also to know how it would be. Maybe it will be good, but I am doubting it.

I am also waiting for this way of working, assuming that satisfies the customer I will probably buy the Trezor again.
The concern now fears that the database is hacked again.

[MisFoxie]

What do you guys think? 90days too long?

The implementation is good for keeping users data safe but why don't they delete it within 1 week after the hardware wallet has been delivered? What do they do by storing users data for so long?

I am waiting to see Trezor anonymous shipping also to know how it would be. Maybe it will be good, but I am doubting it.

I also want to see how they make it anonymous. I guess they will just take delivery address data for delivery and use some kind of anonymous secret code type system for verification so there will be no need to provide an email or name to verify ownership.

[Wincob]

This is a one time delete, are they going to show us when they delete the next? I don't think so and why the hell are they holding data for 90 days? It only takes few minutes to hours for someone to get their hands of those data.

This is bull crap all together, it's not something great to even have any discussion about, I would talk about this if only they wipe data instantly after a buyer got their device shipped to their doors step.

They can Introduce a verification of received device once the buyer got the order delivered, they will then proceed to the keystone website and click on a simple button that says "click here once you receive hardware wallet" then the team will delete data instantly.

[examplens]

This is a progress atleast for a hardware wallet company that wants to get something done.
So, keystone decide to always bring their customers data deletions to public.

I kinda like the idea, and I believe that every crypto wallet manufacturers should start doing the same.
Once 90days have passed every data should be wiped.

Automatic removal of user data is fine, but also all that is bullshit. Where are the guarantees that they will really do it and how can we make sure of it?
Mostly everyone said that they don't keep the data, but somehow it slips away from them so they don't delete it and later it goes public. These are just PR moves, meant to calm us down by making it look like they’re doing something about this issue.

[promise444c5]

How about not retaining the data at all, they should be a way to get rid of those data from the receiving end with a confirmation. I don’t know how but I believe it should be possible.

90 days is long, breach can happen at anytime and it affect even those that purchase on same date of breach so far it’s being recorded before the breach.

Hence, how sure are we that they are truly going to delete the data..  

[dkbit98]

This is a progress atleast for a hardware wallet company that wants to get something done.
So, keystone decide to always bring their customers data deletions to public.

Trust me bro, it is all safu deleted... this is basically what they are saying   
There is no way they can prove personal data is actually deleted, so it is all based on blind trust.
I do agree that nobody should have customer personal information, but some countries actually have law that forces them to keep this infromation.

[BitMaxz]

It's part of inventory management. If they are going to delete the data, how can they be sure if they are not in financial loss but rather in profit?

That's why I think they can't just delete that data since it's part of their inventory management.

If it's allowed to give a fake name and allowed to give a random address like a nearby store, it is much safer than giving the real address. Since here in my country we can give a pickup point or collection point where we can pick up products that we buy online, this might be safer, but the problem is it still asks for identification. No ID, you can't retrieve the product from the pickup location or even the local delivery hubs to pick up your product. It still requires ID.

For now, it's hard to avoid giving our data, so I am sure these hardware manufacturers would also think if they are going to delete it or not since they also need them in the future if their business is hit by AML. 

[Sanitough]

I kinda like the idea, and I believe that every crypto wallet manufacturers should start doing the same.
Once 90days have passed every data should be wiped.

It's just an internal policy or decision on their part since their main responsibility is to ensure that the data remains confidential and safe. Okay, so assuming they will delete the data after that period is reached, how about those shipping companies that will also store their data since those items will pass through a shipping company first before reaching the owners, so there's still a third party involved. If they will do the same, then maybe it's a good way to minimize the risk but things like accounting, and other related company records that need to be retained for audit, I think that's also one of the challenges.

[Zaguru12]

How about not retaining the data at all, they should be a way to get rid of those data from the receiving end with a confirmation. I don’t know how but I believe it should be possible.

For now I don’t think it is possible because of delivery problems. You know most of the details have to be retained to actually give it out to couriers to use and deliver the products to the customers. And due to logistics that cannot be possible in a day I think but let’s be realistic the 90 days frame is also still looking long possibly a good logistics workout to actually reduce the period they can hold the details.

Personally I think that the new anonymous strategy that Trezor is trying to implement is actually giving us an idea of what to do when making an order, we should rather use burner details like emails, addresses and every other contacts to avoid linking the dots to one directly

[Pmalek]

Before this 90-days deletion system, they had a 180-days deletion system and that only worked partially. They didn't care to fix that or check and put pressure on Shopify to do their part. Like with everything else, companies only get serious and start doing their jobs after something unexpected happens. All of a sudden, they understand what they did wrong and now they know how to fix it. Of course, they promise they will make that a priority as long as you buy their products.

[ryzaadit]

I still recall someone shared a tweet on X from someone who are work on there/ex worker from Keystone.
Even though they have a policy for 180-days deletion system they still not doing it, it's there has some guarentee they are also gonna to keep the policy running as they should be? I still don't believe them either.

[YellowSwap]

This is a progress atleast for a hardware wallet company that wants to get something done.
So, keystone decide to always bring their customers data deletions to public.

Trust me bro, it is all safu deleted... this is basically what they are saying   
There is no way they can prove personal data is actually deleted, so it is all based on blind trust.
I do agree that nobody should have customer personal information, but some countries actually have law that forces them to keep this infromation.

It feels harder to now trust hardware wallets then, I guess it's better to avoid them all together, I have a keystone wallet and I have do the needful by using better passphrase but we really can't keep going like this in crypto space.

Apart from Bitcoin I wish there is a better way to generate multi wallet seed phrase offline without having to rely on any crypto wallet companies doing the security for us.

My main focus was gong the best way and I thought that was buying a airgapped device, I never thought that I will be this worried because of possible data leak.