Blogger Arun Thampi has discovered something that may or may not sit right about the free social media app Path while packet sniffing the app last night. Upon first installing the app and registering for an account, Path sends every single one of your contacts in your address book to their server via a .plist. The .plist includes full names, phone numbers, and e-mails.
Path makes the call “https://api.path.com/3/contacts/add” when you first create an account, and it uploads every single one of your contacts to its server. In most people’s mind this obviously makes them feel a little uncomfortable. Thampi details the technical aspects of this, and how you can recreate it yourself, in his blog post.
Path’s co-founder and CEO Dave Morin commented on the situation, saying iPhone users will soon be able to opt-out of the setting in an update that will be rolling out to the App Store shortly. But does that really change anything? He didn’t really explain why Path is doing this, and all of your address book is still on their servers. You can read Morin’s comment after the break:
We believe that this type of friend finding & matching is important to the industry and that it is important that users clearly understand it, so we proactively rolled out an opt-in for this on our Android client a few weeks ago and are rolling out the opt-in for this in 2.0.6 of our iOS Client, pending App Store approval.