We store the shipping/payment info if you create an account. The idea behind it is that entering information on mobile is a hassle and with amberExpress you enter it once and then it works across all stores.
During the summer we went through the PCI DSS process. PCI DSS is a standard for secure handling of credit card data. This means we have to abide by a very strict set of rules of storage/usage.
At the same time, if you don't have an account all your information is volatile and disappears after the order is placed.
When it comes to 2, the truth is we wish it was baked in too. That's why we implemented it the way we did. All we can do / focus on is on building an amazing service.
