Live data from Hacker News

Clubhouse uploads all your contacts

twitter.com

1–10 of 33 posts

Re: Clubhouse uploads all your contacts

#3
post #2

Why is it against GDPR if somebody agreed to it and agreed to their Privacy Policy [1]? I don't understand the claim in this tweet exactly. I think some context is missing. [1]: https://www.notion.so/Privacy-Policy-cd4b415950204a46819478b...

I believe the "We need contacts permission" message is key here. The message should include the purpose for what the contact data will be used for when asking for consent.

> Specific – consent must relate to specific actions relating to the data rather than for any purpose the business wants it. For example, if the data is for a newsletter subscription, it must say exactly that.

https://www.gdpreu.org/the-regulation/key-concepts/consent/

Re: Clubhouse uploads all your contacts

#5
post #2

Why is it against GDPR if somebody agreed to it and agreed to their Privacy Policy [1]? I don't understand the claim in this tweet exactly. I think some context is missing. [1]: https://www.notion.so/Privacy-Policy-cd4b415950204a46819478b...

AFAIK the issue is that the service is pulling in PI of other people without their consent.

You can not store my name/phone number etc without my consent - even if you got that data from one of your user's contact list.

Please correct me if I'm wrong. IANAL.

Re: Clubhouse uploads all your contacts

#6
post #2

Why is it against GDPR if somebody agreed to it and agreed to their Privacy Policy [1]? I don't understand the claim in this tweet exactly. I think some context is missing. [1]: https://www.notion.so/Privacy-Policy-cd4b415950204a46819478b...

If my number is in your phonebook, you cannot give consent to Clubhouse to get that info on my behalf.

Re: Clubhouse uploads all your contacts

#7
The terseness of their permission request does not meet Apple's review guidelines. It's almost identical to one of Apple's unacceptable examples.

https://developer.apple.com/design/human-interface-guideline...

https://developer.apple.com/app-store/review/guidelines/#5.1...

Is there a way to report the app to bring it to Apple's attention?

Re: Clubhouse uploads all your contacts

#8

And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.

I'm assuming signal is following best practice. How else could one match contacts without uploading some contact data?

Re: Clubhouse uploads all your contacts

#9
post #8

And so does every other social media platform. Signal does so with hashes ( https://support.signal.org/hc/en-us/articles/360007061452-Do... ), but there's so few phone numbers that it would be trivial to brute force or rainbow table all the possible values.

I'm assuming signal is following best practice. How else could one match contacts without uploading some contact data?

There is no need to upload or match contacts in this case. It is a required step for inviting a new user. The invite SMS is even sent from the device, not by Clubhouse.

Re: Clubhouse uploads all your contacts

#10
I was extremely annoyed last week when my friend messaged me and asked me if I was going to use clubhouse, I said no I don't think anyone I know would be using it. She said, well.. you have 63 friends using it, I said... I don't have 63 friends! She then proceeded to send me a screenshot with a list of her contacts not on ClubHouse that shows how many of their contacts are on it. I don't know why this bothered me so much, but for whatever reason it did.
Post reply on HN