[Bug]: `profiles/update` and `profiles/create` webhooks trigger protected customer data error

[inetaa]

Please confirm that you have:

• Searched existing issues to see if your issue is a duplicate. (If you’ve found a duplicate issue, feel free to add additional information in a comment on it.)
• Reproduced the issue in the latest CLI version.

In which of these areas are you experiencing a problem?

Extension, App

Expected behavior

Adding in toml file:

[[webhooks.subscriptions]]
topics = ["profiles/create", "profiles/update", "profiles/delete"]
uri = "/webhooks"

scopes = "read_shipping"

Running shopify app deploy deploys new version

Actual behavior

On shopify app deploygetting

│  Version couldn't be created.                                                │
│                                                                              │
│    • This app is not approved to subscribe to webhook topics containing      │
│      protected customer data. See                                            │
│      https://shopify.dev/docs/apps/launch/protected-customer-data for more   │
│      details.                                                                │
│    • This app is not approved to subscribe to webhook topics containing      │
│      protected customer data. See                                            │
│      https://shopify.dev/docs/apps/launch/protected-customer-data for more   │
│      details.                                                                │

Verbose output

Verbose output

2025-10-06T14:13:30.702Z: Analytics event sent: {
"command": "app deploy",
"time_start": 1759760004167,
"time_end": 1759760010230,
"total_time": 6063,
"success": false,
"cli_version": "3.85.4",
"ruby_version": "",
"node_version": "22.15.1",
"is_employee": false,
"uname": "darwin arm64",
"env_ci": false,
"env_plugin_installed_any_custom": false,
"env_plugin_installed_shopify": "["@shopify/cli"]",
"env_shell": "zsh",
"env_device_id": "369dec2deae3f2799343efbac9fb208a91b14c18",
"env_cloud": "localhost",
"env_package_manager": "npm",
"env_is_global": true,
"env_auth_method": "device_auth",
"env_is_wsl": false,
"env_build_repository": "Shopify/cli",
"cmd_app_warning_api_key_deprecation_displayed": false,
"cmd_deploy_flag_message_used": false,
"cmd_deploy_flag_version_used": false,
"cmd_deploy_flag_source_url_used": false,
"cmd_app_all_configs_any": true,
"cmd_app_all_configs_clients": "{"shopify.app.cloud-dev.toml":"df6d2416343b8850cb18d7854de63911","shopify.app.cloud-prod.toml":"5bbd011e284de09e8249f515bc6f49cc","shopify.app.local-i.toml":"ce38b32c8f0a21e7d4752af531e3eca7","shopify.app.local-m.toml":"55a39ee60e238fb602c28ae124f05bd4"}",
"cmd_app_linked_config_used": true,
"cmd_app_linked_config_name": "shopify.app.local-i.toml",
"cmd_app_linked_config_git_tracked": true,
"cmd_app_linked_config_source": "cached",
"cmd_app_linked_config_uses_cli_managed_urls": true,
"project_type": "node",
"app_extensions_any": true,
"app_extensions_breakdown": "{"theme":1}",
"app_extensions_count": 1,
"app_extensions_custom_layout": false,
"app_extensions_function_any": false,
"app_extensions_function_count": 0,
"app_extensions_theme_any": true,
"app_extensions_theme_count": 1,
"app_extensions_ui_any": false,
"app_extensions_ui_count": 0,
"app_name_hash": "e9adf63b695dd767ee3dc280751867c74f29198d",
"app_path_hash": "7df7cb30fa38b1641e893e99dfade2466d68afd8",
"app_scopes": "["read_inventory","read_locales","read_locations","read_products","read_shipping"]",
"app_web_backend_any": true,
"app_web_backend_count": 1,
"app_web_custom_layout": true,
"app_web_framework": "remix",
"app_web_frontend_any": true,
"app_web_frontend_count": 1,
"env_package_manager_workspaces": true,
"business_platform_id": 143588588,
"api_key": "****",
"cmd_app_reset_used": false,
"cmd_deploy_include_config_used": true,
"cmd_deploy_config_modules_breakdown": "["access_scopes","app_proxy","application_url","auth","embedded","handle","name","pos","webhooks"]",
"cmd_deploy_config_modules_updated": "["webhooks"]",
"cmd_deploy_confirm_new_registrations": 0,
"cmd_deploy_confirm_updated_registrations": 0,
"cmd_deploy_confirm_removed_registrations": 0,
"cmd_deploy_confirm_cancelled": false,
"cmd_deploy_confirm_time_to_complete_ms": 1976,
"cmd_all_timing_network_ms": 3243,
"cmd_all_timing_prompts_ms": 1975,
"cmd_all_launcher": "unknown",
"cmd_all_topic": "app",
"cmd_all_plugin": "@shopify/app",
"cmd_all_force": false,
"cmd_all_verbose": true,
"cmd_all_path_override": true,
"cmd_all_path_override_hash": "7df7cb30fa38b1641e893e99dfade2466d68afd8",
"cmd_all_last_graphql_request_id": "a013643a-0a7d-4ad2-96f1-09aa9155bac5-1759760009",
"cmd_all_timing_active_ms": 843,
"cmd_all_exit": "expected_error",
"user_id": "0fcaccca-16e9-4f29-9a98-e1f8604fc964",
"request_ids": [
"aaf426f0-cf56-453a-8b83-3924f5f6d59c-1759760004",
"af5496a0-3e68-48a2-b94c-0d8cea27887b-1759760004",
"84032b8e-c9e5-4ffa-b3a8-60cbecf48ffc-1759760005",
"48a58cc1-411f-43c6-8a92-eb0bcb90267d-1759760005",
"a013643a-0a7d-4ad2-96f1-09aa9155bac5-1759760009"
],
"args": "--verbose",
"error_message": "Version couldn't be created.",
"env_plugin_installed_all": "["@shopify/cli"]",
"metadata": "{"extraPublic":{},"extraSensitive":{}}"
}
2025-10-06T14:13:30.716Z: Reporting handled error to Bugsnag: Version couldn't be created.

Reproduction steps

1. Add to toml file webhooks: "profiles/create" or "profiles/update"
2. Include scope read_shipping
3. Run shopify app deploy

Operating System

Mac OS

Shopify CLI version (shopify --version)

3.85.4

Shell

No response

Node version (run node -v if you're not sure)

No response

What language and version are you using in your application?

No response