Path Social Media App Uploads iOS Address Books to Its Servers

The Path iOS app, unlike the Android version shown here, is under fire for grabbing users' address books without first requesting an opt-in. Photo: Ariel Zambelich/Wired.com

Path, an upstart social media service launched by former Facebook employee Dave Morin, is scrambling to explain a security breach discovered by a software developer in Singapore.

Arun Thampi was attempting to hack a MacOS version of the Path iOS app, and discovered the app was making API calls to Path’s servers. Thampi investigated further and discovered the app was sending his entire address book — names, email addresses and phone numbers — directly ...

Read the full story at Gadget Lab

You might also like

Apple Says Grabbing Address Book Data Is an iOS Policy Violation The Path iOS app, unlike the Android version shown here, is under fire for grabbing users' address...

Path Apologizes For Address-Book Data Snafu, Promises To Delete Data Path,...

Path addresses privacy controversy, but social apps remain a risk to users iOS users' address books can easily be copied by apps that call on that data,...

Congress Queries App Developers On Their Data Privacy Practices Path CEO Dave Morin explained why his app collects address book data February 8th in San Francisco. Photo:...