Live data from Hacker News

Facebook Android app sends phone number to Facebook servers without consent

symantec.com

21–30 of 91 posts

Re: Facebook Android app sends phone number to Facebook servers without consent

#21
This is pretty standard in Android apps for analytics tracking to use the phone number, IMEI or other values. A while back, a few production phones shipped where Settings.Secure.ANDROID_ID returned invalid values (null, the same value for all devices of that model, etc). This is the reason that most apps you come across ask for the READ_PHONE_STATE permission.

Re: Facebook Android app sends phone number to Facebook servers without consent

#22
post #9

You know what the super not cool part is? Tons of Android phones come pre-packaged with a Facebook app that you can't delete unless you root your phone.

Do carriers remove the "Disable" feature in Android 4+ in "Manage Apps?"

Re: Facebook Android app sends phone number to Facebook servers without consent

#23

This is pretty standard in Android apps for analytics tracking to use the phone number, IMEI or other values. A while back, a few production phones shipped where Settings.Secure.ANDROID_ID returned invalid values (null, the same value for all devices of that model, etc). This is the reason that most apps you come across ask for the READ_PHONE_STATE permission.

Everyone is focusing on FB but the bigger problem is that any app can probably take your phone number without permission. Paging Al Franken.

Re: Facebook Android app sends phone number to Facebook servers without consent

#24
post #23

This is pretty standard in Android apps for analytics tracking to use the phone number, IMEI or other values. A while back, a few production phones shipped where Settings.Secure.ANDROID_ID returned invalid values (null, the same value for all devices of that model, etc). This is the reason that most apps you come across ask for the READ_PHONE_STATE permission.

Everyone is focusing on FB but the bigger problem is that any app can probably take your phone number without permission. Paging Al Franken.

Actually, when you install an application you accept the READ_PHONE_STATE permission. So you're explicitly giving them permission to take your phone number. This doesn't really apply to pre-installed applications, but there's really no argument that they're doing it without your consent if you download the application from the Play Store.

Re: Facebook Android app sends phone number to Facebook servers without consent

#25
post #19
post #10

Earlier quoted context omitted.

Don't you agree when buying the phone? Just curious

I supposed I could have googled it to find out, but I've certainly never had a carrier tell me in advance what apps would be on my phone. Perhaps it's buried in the fine print that I agreed to without reading, but honestly I doubt it.

Every Smartphone comes with certain pre-installed apps that you might not necessarily desire. But facebook certainly never was one of them. At least none of the Samsung series comes with it.

Re: Facebook Android app sends phone number to Facebook servers without consent

#27
post #19

Earlier quoted context omitted.

I supposed I could have googled it to find out, but I've certainly never had a carrier tell me in advance what apps would be on my phone. Perhaps it's buried in the fine print that I agreed to without reading, but honestly I doubt it.

Every Smartphone comes with certain pre-installed apps that you might not necessarily desire. But facebook certainly never was one of them. At least none of the Samsung series comes with it.

It certainly was one of them on some phones. I have had a "Facebook for LG" in the past that wasn't removable via the factory phone image.

Re: Facebook Android app sends phone number to Facebook servers without consent

#28
post #12
post #6

We reached out to Facebook who investigated the issue and will provide a fix in their next Facebook for Android release. They stated they did not use or process the phone numbers and have deleted them from their servers. What utter garbage. They're really going to claim it was an accident?

Facebook never said it was an accident.

Indeed.

Facebook are a rotten company like this. They'll throw something out, then yank it if they get caught. It makes you wonder what we haven't noticed yet.

Re: Facebook Android app sends phone number to Facebook servers without consent

#29

Why is there an API for phone number that does not require user consent? Facebook and Google are both at fault here.

In order to install the app the user has to approve a long list of required permissions including "read phone status and identity".

Re: Facebook Android app sends phone number to Facebook servers without consent

#30
post #22
post #9

You know what the super not cool part is? Tons of Android phones come pre-packaged with a Facebook app that you can't delete unless you root your phone.

Do carriers remove the "Disable" feature in Android 4+ in "Manage Apps?"

on my phone I can disable it
Post reply on HN