cdransf/coryd.dev-eleventy
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: add post descriptions

Browse source
This commit is contained in:
Cory Dransfeldt 2023-12-13 11:51:35 -08:00
parent e411b9b85f
commit 93a3f505a5
No known key found for this signature in database
53 changed files with 110 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/posts/2017/app-sarahah-uploads-contacts-without-permission.md
View file

@ -1,8 +1,9 @@
---
date: '2017-08-27'
draft: false
title: Sarahah uploads your contacts without permission
title: 'Sarahah uploads your contacts without permission'
description: "This behavior seems to be all too common lately and, while most apps ask for permission to access contacts, it's worth bearing in mind that they may not need that access. Additionally, once that access is granted, it isn't always clear what's actually done with the data."
link: https://theintercept.com/2017/08/27/hit-app-sarahah-quietly-uploads-your-address-book/
draft: false
tags: ['iOS', 'privacy']
---
@ -10,7 +11,7 @@ tags: ['iOS', 'privacy']
> Sarahah bills itself as a way to "receive honest feedback" from friends and employees. But the app is collecting more than feedback messages. When launched for the first time, it immediately harvests and uploads all phone numbers and email addresses in your address book.<!-- excerpt -->
This behavior seems to be all too common lately and, while most apps ask for permission to access contacts, it's worth bearing in mind that they may not need that access. Additionally, once that access is granted, it isn't always clear what's actually done with the data.[^1] If an app asks for access to sensitive data, it's worth considering what they intend to use it for and how securely it might be stored should they copy it off of your device.
This behavior seems to be all too common lately and, while most apps ask for permission to access contacts, it's worth bearing in mind that they may not need that access. Additionally, once that access is granted, it isn't always clear what's actually done with the data[^1]. If an app asks for access to sensitive data, it's worth considering what they intend to use it for and how securely it might be stored should they copy it off of your device.
**Update:** apparently the app [is going to be updated to discontinue this behavior](https://threatpost.com/anonymous-messaging-app-sarahah-to-halt-collection-of-user-data-with-next-update/127668/). Better late than never, I suppose.