Design a system integrating analytics data with participant recruiting

Tests system design for behavioral targeting in research ops. A strong answer covers: a warehouse-to-tool pipeline; consent and privacy gates; behavioral SQL segmentation; and frequency capping. Red flag: skipping GDPR and consent to focus only on data joins.
What's really being asked
This question tests whether you can architect a reliable, privacy-compliant data pipeline that turns raw product analytics into actionable research recruitment. The interviewer wants to see systems thinking across data engineering, API integration, privacy governance, and UX research operations. They care about your ability to balance automation with user trust, and to design for scale without spamming users.
The full answer
First, define the data flow. Start with an analytics warehouse like Snowflake or BigQuery, or an event stream from Amplitude. Use a scheduled batch job or a streaming pipeline to compute behavioral cohorts, for example users who completed onboarding but have not returned in 14 days. Second, insert a consent and privacy gate. Before any outreach, check an opt-out registry and enforce GDPR or CCPA requirements; anonymize or pseudonymize data where possible and only surface user identifiers to the recruiting tool after consent is confirmed. Third, integrate with the recruiting tool via its API, such as Ethnio REST API, pushing qualified user IDs, segment tags, and priority scores. Fourth, implement business logic inside the recruiting tool: screener questions to validate fit, frequency caps so no user receives more than 1 invite per 30 days, and automatic scheduling with calendar integration. Fifth, close the loop by writing research outcomes and incentive payouts back to the warehouse for longitudinal tracking.
The mistakes people make
A major red flag is skipping consent and proposing to match analytics PII directly to email addresses for bulk outreach. Another is building a custom recruiting platform instead of leveraging existing APIs and intercept SDKs. Candidates often forget fatigue management and suggest inviting the same power users repeatedly, which degrades data quality. Ignoring screener logic and assuming behavioral data alone guarantees research fit is also a weak signal.
What usually comes next
Expect the interviewer to ask how you would handle real-time intercepts versus daily batch syncs, with the tradeoff being latency versus cost. They may probe your de-identification strategy if the analytics warehouse contains sensitive health or financial data subject to HIPAA. They might also ask how you would pause the pipeline if the research budget or incentive pool is exhausted, or how you prevent the same user from being invited to multiple simultaneous studies.
A concrete example
Suppose you want to interview users who abandoned a new checkout flow. A nightly Airflow job queries the warehouse for sessions where the checkout event fired but the purchase event did not, limited to the last 7 days. The job joins against a consent table to remove opt-outs, then pushes the resulting user list to Ethnio via API with a tag like checkout_abandon_2024. Ethnio triggers an in-product intercept on the users next visit, shows a 2-question screener, and offers a $50 incentive for a 30-minute interview. If the user qualifies, Calendly auto-schedules, and the attendance status is synced back to the warehouse within 1 hour.
Interview question
When architecting a pipeline from an analytics warehouse to a recruiting tool, which step must occur immediately before user identifiers are exposed via API?
- a.Check the opt-out registry and confirm privacy consentCorrect
- b.Apply a 30-day frequency cap to exclude recent invitees
- c.Compute behavioral cohorts via SQL segmentation on warehouse data
- d.Validate research fit with a screener against segment criteria
Why? this is the answer
The card specifies that a consent and privacy gate must be inserted before any outreach, and identifiers should only surface to the recruiting tool after consent is confirmed. While cohort computation happens earlier in the warehouse and screener logic typically runs inside the recruiting tool after the API push, consent must be verified at the boundary before identifiers leave the warehouse environment.
Just read this? Test yourself on what you have been reading.
Read the original → ethn.io
- #system design
- #data pipelines
- #ux research
- #privacy
- #api integration
You just looked this up. Could you explain it out loud?
That is the part interviews actually test. Tezvyn takes questions like this one and gives you what the interviewer is really checking, the answer that lands, and the mistake that ends the conversation, in the four minutes before your next meeting.
The iPhone app is on the way
We are building it. Until it lands, nothing here is held back from you: every interview card, your saved cards, streaks and the job board all work in Safari, plus hundreds of free practice quizzes of thirty questions each. Sign in and it all carries over to the app the day it arrives.
Want it as an icon? Tap Share at the bottom of Safari, then Add to Home Screen. It opens full screen and the cards you have read stay available offline.
We are hiring for this. Open roles that interview on system design — each one lists the topics its interview covers.
See open roles