Congress Weighs in on iOS Apps Collecting Address Book and Other Personal Data
Last week, controversy erupted when it was discovered that the popular iOS app Path was uploading users' entire address books to the company's servers without alerting users or asking for authorization. While Path quickly deleted all address book data on its servers and updated its app to make the data collection an opt-in service, the issue has cast a fresh light on user privacy issues on iOS.
As noted by The Next Web, U.S. Congressmen Henry Waxman and G.K. Butterfield have now weighed on in the issue, sending a letter to Apple requesting information on the company's data collection policies it imposes on App Store developers.
In a letter to Apple CEO Tim Cook, the legislators state:
"This incident raises questions about whether Apple’s iOS app developer policies and practices may fall short when it comes to protecting the information of iPhone users and their contacts."
Butterfield and Waxman then quote parts of Apple’s iOS developer website which states that Apple provides a comprehensive collection of tools and frameworks for storing, accessing and sharing data. It is then questioned whether Apple requires apps to request user permission before transmitting data about a user.
It is not terribly unusual for Congress to request information from companies when issues related to consumer protection and privacy arise, and Apple was subject to a similar process when questions about location information arose last year. In that case, Senator Al Franken contacted Apple with questions about the company's policies, with executives from Apple and Google later testifying in a Senate hearing on the matter.
Top Rated Comments
(View all)
Flashlight app wants full internet access, location and contacts? No install for you!
Example:
iOS should display a request when an App requires access to user data (address book, photos, etc), anything that is external to the App itself.
Isn't that what the new App Sandboxing is about in Lion?
No. Sandboxing isn't about asking permission, it is about being able to do something or not. An app can request the ability to access your address book or not. If it requests it, it can. If it doesn't, it can't. They idea is that when deciding to accept the app or not, Apple will check whether the app has requested the ability, and if the app has any good reason to do so.
Another thing is that Apple can eventually provide sandboxed code to do things. For example, some code that lets the user choose a name from the address book and send an email to that person. That code would live in its little sandbox with access to address book and email. However, the rest of the application wouldn't be able to access the address book. So a game could allow you to send a picture to a friend that way, without itself being able to read your address book.
Isn't that what the new App Sandboxing is about in Lion?
For the love of all things important my people's government- go work on some real fricken issues; and stay the hell out of what you have no clue about.
Oh wait...
So Congress can't do their job 9 times out of 10, and the 1 time they pressure a company to answer legitimate questions regarding consumer privacy you're equally as mad?
Google has a complete record of people's emails, voicemails, websurfing habits (remember, with the new "privacy policy" they are indexing your entire web existence if you use their 8.8.8.8 DNS), Google+ friends and interactions, the list is almost endless.
Slight difference I believe. If I'm using someone's services for my email and contact information - I can pretty much assume - since they are HOSTING that info - they have access to it.
However - this is completely differerent. A private device with personal data which is then being unknowingly uploaded to 3rd parties without consent.
If you don't see the difference, well....
So Congress can't do their job 9 times out of 10, and the 1 time they pressure a company to answer legitimate questions regarding consumer privacy you're equally as mad?
Because they have sent how many of these letters in the past 12 months? Why can't they concern themselves with true privacy issues like the FCRA and the credit agencies that sell our private information legally when someone pulls your credit. Ever wonder why you get calls from unknown's after you apply for financing? Google "Trigger Leads".... Why can't they focus on this REAL issue that has been around for 7 years now. This is a real privacy issue... selling your personal information legally @ pennies.
The company that F'd this up apologized, removed the data, and tried to make amends. I do not condone this as to be OK, but I am sick of all these media driven congressmen with a hard on lately when there are far worse privacy issues out there that need addressing.
Read section 17.1 of the iOS guidelines:
"Warning" users is the current solution by obtaining permission before obtaining data to some extent. In Path's case, they were in breech of the guidelines by not doing it.
Had path added a popup with what they intended to do with your contacts with an accept/deny button, things would be fine.
To further...
If apps have to be APPROVED by Apple and Apple has guidelines - then Apple (in my opinion) is just as liable for a breech in security. If you're going to have a TOS - it's up to you (Apple) to enforce it.
[ Read All Comments ]
Accessory maker Moshi has released a new ultra-thin plastic shell protective case for the 11" and 13" MacBook Air models. This type of plastic case tends to be especially popular among...
Blizzard Entertainment said this week that it sold more than 3.5 million copies of Diablo III on launch day, setting the record for fastest-selling PC game. The company also sold 1.2 million copies...
Hard drive maker Seagate has announced it will purchase data storage device maker LaCie for roughly $186 million.
The company plans to buy the controlling stake owned by Philippe Spruch,...
Intuit has upgraded the iOS app for its Mint personal finance tool with two new "most-requested" features that should keep users from ever having to go to the Mint.com website. Until now,...
Wired points to a recent Technology Review interview with IBM chief information officer Jeanette Horan highlighting the issues of the "bring your own device" trend in which employees choose...
