Accessibility Checker: ADA & WCAG, published by Bity LLC. Last updated 14 September 2026.
The app requests one Shopify access scope: read_products. It uses it for one thing — to ask the Admin API for the storefront address of your first published product and collection, so the accessibility scan grades the real pages a shopper buys from instead of guessing at URLs. It reads a title and a public page address; it does not read inventory, costs, or any other product field, and it never writes.
It requests no other scope. It cannot read your orders, your customers, your discounts, or your payouts, because it was never granted permission to. That is not a policy promise — it is enforced by Shopify at the point of install, and the full list is on the permission screen you approve. If that one scope is ever revoked, the scan keeps working — it falls back to the conventional /collections/all and /cart paths.
No customer personal data of any kind. No order data. No product data beyond the public storefront address described above. No analytics or advertising trackers in the embedded admin. Because the scan runs against your public storefront as an anonymous visitor would see it, it reads nothing that a shopper could not already see.
The scan itself is run by RatedWithAI (also operated by Bity LLC), which loads each page in a headless browser and runs the open-source axe-core rule set against it. The page URLs — and the storefront password, if you supplied one — are sent to that service and to the infrastructure providers that host it, for the duration of the scan. We do not sell data, and we do not share it with advertisers.
Session tokens are deleted when you uninstall the app — Shopify sends an app/uninstalled webhook and the record is removed. Scan results are retained so you can compare a page over time; email shibley@apistatuscheck.com to have them deleted sooner.
The app implements Shopify’s three mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Since the app holds no customer data, the customer webhooks have no personal data to return or erase; shop/redact removes your shop’s stored session.
This app reports accessibility violations. It does not make your store compliant with the ADA or WCAG, and no software can. Any vendor telling you otherwise is describing a legal risk, not a product — in January 2025 the FTC fined an overlay vendor $1M for exactly that claim.
Bity LLC — shibley@apistatuscheck.com