Do product managers have ethics? About user reset password

I once saw a news in January, 2018. Netizens launched a topic: “Can Tencent see the chat records of wechat users?”

In this matter, Tencent pr’s reply is as follows

No matter whether Tencent can check the chat records is true or not, this matter is believed to inspire product managers around one point: the issue of user privacy data protection, users under the use of our products. Can his account information and basic information be viewed by internal management or operation personnel? Or what kind of permissions should I have to operate?

What data can be modified, what data can be protected, and what data is subject to an approval process? This is what product managers need to consider when designing user account systems or business modules.

Especially in the client end of the product manager, reasonable data storage and disassembly is related to enterprise transformation, product optimization of the effective way. Today, I’d like to start a discussion on product managers and user privacy

How do you handle or design such modules at work?

Nowadays numerous mobile terminal or small program product account system will adopt mobile number + verification code or account + password login way. Regardless of the product scenario or business model, if a user changes his mobile phone number, the user cannot log in using the mobile phone number plus the verification code.

Taking account + password seems to be an effective way to solve the problem of mobile phone replacement, but if the user just forgot the password, some products may design a complaint process, users can appeal to retrieve the password

But if there is no appeal process or the appeal process still fails, very few users call the customer service department.

Do I need to reset the password? Does the customer service reset or ask the user to give up the account?

The question is whether to give customer service or internal operations staff a functional module: reset user passwords

Here, “I help you fill in” means that when a user registers as a new user of the product, it may be because some information, such as address and work unit, is not filled in. Do the internal operation personnel have the authority to add such information? Commonly used module functions such as CRM module, user management module

Question: Do users modify the data on their own initiative or can the data be handed over to internal personnel?

Since the body vote can only support one vote, the vote for this answer can be left in the comments.

The two cases discussed in the appeal are two problems that product managers must consider when doing user management and customer management.

User information and privacy information are obviously two different dimensions of data, but they are both user data. How and when to use this data is what product managers must consider when designing functions.

I also did a social analysis of the facebook news events we know about this year. Predictions from Facebook leaks: Can social relationships really be broken?

Similar to reset the password, similar to help users fill in the basic information of these operations, if not these interface operations, in fact, can also achieve the purpose of changing the user password. But it would have to be a student developer, or a team developer, working together to leak a lot of user data.

The need to reset your password must come from customer service or operations. This feature, once developed, could cause anyone with access to the platform to reset a product user’s password. Greatly increased user risk factor.

Well, that’s it for today’s share. I will continue to update two posts a week

As a product manager, do you consider the ethics of appeal? Feel free to leave a comment

-End-

In addition, my first book “From Zero to One: PM changes the World” was officially launched as an electronic file. This book summarizes 222 original products, covering the content of product manager interview, algorithm, interaction and other different dimensions. If you are interested, you can reward and leave a message on your email. I will send an email to you around 12:00 noon every day (hope you do not spread support, support copyright). If you need to preview the book outline, jump to the link

A book for yourself and product people: from zero to one.