A computer-implemented method, comprising: at a first computing device having memory and one or more processors: receiving a data access request from a second computing device, wherein the data access request is generated by a user of the second computing device for accessing data service at a remote server; determining whether the user has previously provided personal information and authorization to the first computing device through the second computing device; if the user's personal information and the user's authorization are found: generating a record for the data access request, wherein the record includes the user's personal information and an identifier of the data access request; if the user's personal information is found but the user's authorization is not found: generating a record for the data access request, wherein the record includes an identifier of the data access request and an identifier of the second computing device; and if neither of the user's personal information and authorization is found: identifying one or more user identifiers that are associated with the second computing device; and returning personal information associated with the one or more user identifiers to the second computing device, wherein the personal information associated with the one or more user identifiers is to be displayed on the second computing device so that the user of the second computing device can choose personal information associated with one of the one or more user identifiers. receiving a data access request from a second computing device, wherein the data access request is generated by a user of the second computing device for accessing data service at a remote server; determining whether the user has previously provided personal information and authorization to the first computing device through the second computing device; if the user's personal information and the user's authorization are found: generating a record for the data access request, wherein the record includes the user's personal information and an identifier of the data access request; if the user's personal information is found but the user's authorization is not found: generating a record for the data access request, wherein the record includes an identifier of the data access request and an identifier of the second computing device; and if neither of the user's personal information and authorization is found: identifying one or more user identifiers that are associated with the second computing device; and returning personal information associated with the one or more user identifiers to the second computing device, wherein the personal information associated with the one or more user identifiers is to be displayed on the second computing device so that the user of the second computing device can choose personal information associated with one of the one or more user identifiers. identifying one or more user identifiers that are associated with the second computing device; and returning personal information associated with the one or more user identifiers to the second computing device, wherein the personal information associated with the one or more user identifiers is to be displayed on the second computing device so that the user of the second computing device can choose personal information associated with one of the one or more user identifiers.