Live data from Hacker News

Clubhouse uploads all your contacts

twitter.com

11–20 of 33 posts

Re: Clubhouse uploads all your contacts

#12
post #8

Earlier quoted context omitted.

I'm assuming signal is following best practice. How else could one match contacts without uploading some contact data?

There is no need to upload or match contacts in this case. It is a required step for inviting a new user. The invite SMS is even sent from the device, not by Clubhouse.

One of the recent versions sends it from Clubhouse servers not the device.

Re: Clubhouse uploads all your contacts

#13

The terseness of their permission request does not meet Apple's review guidelines. It's almost identical to one of Apple's unacceptable examples. https://developer.apple.com/design/human-interface-guideline... https://developer.apple.com/app-store/review/guidelines/#5.1... Is there a way to report the app to bring it to Apple's attention?

Sadly, it doesn't seem so. The fact that there is no clear place to do this is honestly quite ironic given that Apple requires all third-party apps to have an easy way to report rulebreaking content…

Re: Clubhouse uploads all your contacts

#14
post #10

I was extremely annoyed last week when my friend messaged me and asked me if I was going to use clubhouse, I said no I don't think anyone I know would be using it. She said, well.. you have 63 friends using it, I said... I don't have 63 friends! She then proceeded to send me a screenshot with a list of her contacts not on ClubHouse that shows how many of their contacts are on it. I don't know why this bothered me so…

This is precisely why iOS and Android should never have allowed an app direct access to our Contacts. Rather, everything from the API should be anonymous hashes AND be different per application. The OS should also have supplied a "Contact list UI" that gave apps a unified way of displaying contacts without giving away the keys to the kingdom.

Otherwise, once your contact list is uploaded, everyone's privacy is violated.

Re: Clubhouse uploads all your contacts

#15
post #8

And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.

I'm assuming signal is following best practice. How else could one match contacts without uploading some contact data?

Signal's "best practice" for a while was to use special hardware that relied trusting Intel in the best case but in practice was also perpetually being broken into…

Re: Clubhouse uploads all your contacts

#17

The terseness of their permission request does not meet Apple's review guidelines. It's almost identical to one of Apple's unacceptable examples. https://developer.apple.com/design/human-interface-guideline... https://developer.apple.com/app-store/review/guidelines/#5.1... Is there a way to report the app to bring it to Apple's attention?

Sadly, it doesn't seem so. The fact that there is no clear place to do this is honestly quite ironic given that Apple requires all third-party apps to have an easy way to report rulebreaking content…

There is actually! I was told about it over the phone with an App Review rep a few weeks ago. I didn't write it down unfortunately, but I think it was appreview@apple.com - googling for that e-mail address returns some results, so I am pretty positive that was it.

Re: Clubhouse uploads all your contacts

#18

And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.

I wish Signal didn't use phone numbers as identifiers. That's the original sin of all these apps and the convenient excuse for uploading contacts

Re: Clubhouse uploads all your contacts

#20
post #17

Earlier quoted context omitted.

Sadly, it doesn't seem so. The fact that there is no clear place to do this is honestly quite ironic given that Apple requires all third-party apps to have an easy way to report rulebreaking content…

There is actually! I was told about it over the phone with an App Review rep a few weeks ago. I didn't write it down unfortunately, but I think it was appreview@apple.com - googling for that e-mail address returns some results, so I am pretty positive that was it.

Awesome! It seems that most of the references in search results are around interactions between Apple and developers. But it definitely looks like the best place to send violations as well. Thank you!
Post reply on HN