Between the Lines

Larry Dignan, Andrew Nusca and Rachel King

Apple: Apps using contact data are in "violation"; fix coming soon

By | February 15, 2012, 11:39am PST

Summary: Apple says that applications that access contact data are in “violation” of the terms and conditions of the App Store, and a fix will soon come into force.

After the furore around Path accessing and storing users’ contact list data, Apple has said it will require any iPhone, iPad or iPod touch application downloaded from its App Store to be given explicit consent by the user before contact data is accessed.

Just as when location data is requested by an application in a pop-up message on iOS devices, access to the contact list will be displayed in a similar prompt, it is understood.

In a statement, an Apple spokesperson said:

Apps that collect or transmit a user’s contact data without their prior permission are in violation of our guidelines. We’re working to make this even better for our customers, and as we have done with location services, any app wishing to access contact data will require explicit user approval in a future software release.”

Although the timing of the fix is not yet known, it is often within Apple’s nature to issue such fixes within days or the following week; although timing can vary.

As reported by sister site CNET, U.S. lawmakers have been made aware of the problem. A House subcommittee sent a letter to Apple this week asking why it does not force application developers for its platform to request user permission before uploading contact data to other services.

Twitter was also embroiled in the privacy row after it was found that iOS and Android users have their data “scanned” and uploaded by the application when the “Find friends” feature is used. Twitter admitted that the data is retained for 18 months, while its privacy policy does not explicitly disclose that it uploads and stores user contact information.

Apple did not immediately respond to questions in reply over other stored data, such as email messages or calendar data.

Supporting image credit: Apple.

Related:

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Zack Whittaker, a criminologist who studied at the University of Kent, Canterbury, is a journalist, writer and broadcaster.

Disclosure

Zack Whittaker

I worked briefly with Microsoft UK in 2006 but no longer have any connection with the company. Regardless, I remain impartial and unbiased in my views.

I don't hold any stock or shares, investments or industrial secrets in any company, but have signed confidentiality agreements with a number of UK and U.S. organisations, whose names I am not at liberty to disclose.

I was involved with Kent Union, the University of Kent's student union, undertaking voluntary, non-salaried, elected positions between early 2009 and mid-2010.

No other company, body, government department, non-governmental organisation or third sector organisation employs me or pays me a salary in any capacity whatsoever.

As a freelance journalist, whenever expenses are given and taken by a company that is not CBS Interactive, these will be disclosed in each relevant post to ensure transparency.

I currently work with a UK law enforcement unit, but this is an entirely separate position which bears no connection to other work.

(Updated: 23rd October 2011)

Biography

Zack Whittaker

Zack Whittaker, criminologist who studied at the University of Kent, UK, is a journalist, writer and broadcaster.

After studying criminology at university, though still in his early-20's, he has already had a series unconventional work and voluntary positions. He has worked with researchers studying neurological illnesses like Tourette's syndrome (which he suffers from), has given lectures on the nature of disabilities in the public community, and occasionally ends up speaking on television and radio discussing the events of the day.

He first had academic work published at the age of 22, then still an undergraduate, and has been cited by a wide range of publications: from CNN, the Huffington Post, AllThingsDigital, The Atlantic Wire and CBS News.

8
Comments

Join the conversation!

Just In

RE: Apple: Apps using contact data are in
danindenver 18th Feb
Interesting! I seem to recall Apple "distancing themselves" recently over the issue of Carrier IQ, saying that they don't use that stuff. Well, not any more, anyway. Sounds to me like it's time for a new cell phone company to emerge; one that will stand on the principle of open and transparent services for a clearly stated upfront price.
0 Votes
+ -
Whether they like it or not, Apple will eventually have to tighten the API and simply prevent this type of application behavior.

And people were saying Windows Phone was too strict at the API level. Ironic.
0 Votes
+ -
RE: Apple: Apps using contact data are in
Imrhien Updated - 15th Feb
@TheCyberKnight Agreed! Still, it's good to see this kind of change. Apple's behaviour in the past towards personal information has not been particularly impressive. This is a step in the right direction.
0 Votes
+ -
Makes you wonder what the heck the App Certification process actually does. If it's not checking for this type of simple API usage then what's the point? Apps have been tossed from the AppStore for far less trivial practices. But stealing my contacts does warrant an immediate eviction? What if my contacts include Tim Cooks or Jonathan Ives number? Also, Apple how do I get my contacts back or deleted from all the apps that stole them. Users should be rightfully angry at the developers who did this but they should really hold Apple accountable because in my mind this is a major security flaw designed in Cupertino.
0 Votes
+ -
RE: Apple: Apps using contact data are in
Untergang des abenlandes 16th Feb
Why not call it by its proper name? This is stealing, pure and simple!

Given what we already know, millions of people have had their personal information stolen.

How is this not the biggest breach of security in computer history?
0 Votes
+ -
Oh this is just more of the same from apple and companies like them, they will skirt any law they can for a profit,and then when caught blame someone else. These types of issues have been going with apple for some time, and this is just when apple is trying to hit it's stride and be this bigger and better than thou company. My thing with apple just like many things just look at HISTORY!!
0 Votes
+ -
Yea, I guess at least you don't spend .99 to have your personal information stolen and all your contacts inboxes loaded with spam and viruses like you do with Android and the Google platforms that you get so effectively for free, but at least most in walled Apple platform work.
0 Votes
+ -
If they're going to implement more of these approval prompts, I hope they create a screen to approve these permissions in summary: something like the Android approval screen but with they signature ON / OFF iOS toggles.
0 Votes
+ -
Interesting! I seem to recall Apple "distancing themselves" recently over the issue of Carrier IQ, saying that they don't use that stuff. Well, not any more, anyway. Sounds to me like it's time for a new cell phone company to emerge; one that will stand on the principle of open and transparent services for a clearly stated upfront price.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix