Live data from Hacker News

Unroll.me

daringfireball.net

11–20 of 55 posts

Re: Unroll.me

#11

If you have ever used the service, it probably has still almost full access to your gmail account (I noticed it had in mine). You can remove its authorisations at: https://myaccount.google.com/permissions

Thanks for the link for the lazy

Re: Unroll.me

#12
post #5

Basically a repost of https://news.ycombinator.com/item?id=14180463 Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Turns out I hadn't, but it was pitched on Product Hunt both in April 2015 and May 2016. I'm hoping at least security folks made the mental connection that signing up meant compromising your personal emails. That's the single reason I didn't bother.

> Had to search my inbox as a sanity check to make sure I hadn't signed up for the service. Wouldn't you remember granting a third party full access to your email inbox? That doesn't seem like a trivial decision to make.

I trust my brain but verify my memories from time to time. :)

Re: Unroll.me

#14
Selling data to the highest bidder doesn't surprise me. Users should expect this, but since it's all buried in TOS, only more savvy users are going to know or notice.

Maybe it's time for some ethical standards among developers. Dumping email to an insecure server should be something that every developer would refuse. Somebody was just following order.

Re: Unroll.me

#17
This may sound silly, but I consider any application that requests full read access to my Gmail account to be akin to asking for my social security number.

I remember when the big wave of smart email apps first came out a few years ago, and the horror was the expressed here when it was revealed that these apps basically route all of your email through their servers in order to do processing on it.

Sadly at lot of the trepidation about services like that seems to have abated -- or maybe the general population just isn't aware of how intrusive these types of services could be. But I would never allow any third party service to access my email.

Re: Unroll.me

#18
> operating under the radar

The privacy policy is clear and easy to find and understand. You can be annoyed with yourself for not reading it. You can decide the service isn't worth the tradeoffs. You can be annoyed with yourself for being naive about how free products work.

But it's illogical and disingenuous to call this "under the radar" or blame the service for your own surprise about how it works. We have free will and a responsibility to understand the agreements we enter into. Admitting so casually that we can't handle those things is a scary thought.

Re: Unroll.me

#20
post #16

I prodded unroll.me a couple of years ago about their data retention policy. Their answer was sketchy so I ended up not using the service. I'm surprised it took this long for someone with reach to look into them. Original thread: https://twitter.com/elahd/status/575692415132135425 DMs: http://imgur.com/H0UABYa

Sounds like you have great evidence for a class-action against them. If they told their users they only retain emails for 7 days, but actually kept every email in an S3 bucket that was then sold illegally to Slice, every user of Unroll.me could sue for breach of contract, damages, etc...
Post reply on HN