Service Blueprint

Wrong Door

Delivered, Just Not to You

Designing With Intent: Why Clarity Beats Complexity
I once ordered an expensive phone and had it delivered to my building, only to find out later it had been logged to the wrong unit. Because the community app ties every unit to its own pickup barcode, whichever unit the parcel gets logged under is the one that can collect it. A mistyped unit at intake sends both the notification and the right to collect straight to the wrong door. I found out in time, but only by chance.
Community pickup apps are now common in Taiwan, built to solve a simple problem, no one is home during the day. A courier hands the parcel to building staff, staff enter the recipient's unit into the app, and the app notifies whoever is on file for that unit, releasing the parcel to that unit's own barcode. Nothing along the way verifies that the unit was even entered correctly in the first place.
I chose this scenario because the error never reaches the resident directly. There is no missed call, no error message, nothing to notice in the moment. It happens in a single line of data someone else enters, and the resident only finds out days later, if they notice at all.

Where the check never happens

Once a unit is entered incorrectly, nothing afterward is designed to catch it. The barcode does not know the log is wrong. It only confirms that a code matches what was written down. Staff are not asked to check the entry twice, and the community rules that came with this pickup system were never written to require it either.
The responsibility for catching this kind of error does not sit anywhere in particular. The courier's job ends at a signed handoff. The management company's job ends once the parcel is logged. The app itself was built to trust whatever was entered, not to question it. Each role is doing exactly what it was defined to do, and the one checkpoint that would have mattered, confirming the unit actually matches the resident, was never assigned to anyone.
What gets missed most is the moment of discovery. The only way a resident catches this is by noticing that two systems disagree, the courier app says delivered, the building app shows nothing received. If the resident has forgotten they ordered something at all, the parcel can sit with the wrong household for weeks before anyone thinks to ask.

EVERY ROLE DID ITS JOB. THE CHECK BELONGED TO NO ONE.

THE GAP

If the parcel carried its own scannable code, checked against the log automatically at handoff, the single point of manual entry driving this entire failure would disappear. That check simply was not built in. Most parcels still arrive at the right door, and nothing in the system is set up to notice the ones that do not.
Quotes represent each party's likely position, not verbatim statements.