Live data from Hacker News

Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

vice.com

51–60 of 375 posts

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#52
post #26

EVERY. SINGLE. APP. THAT. INCLUDES. THE. FACEBOOK. SDK. Even if you don't log in. The Facebook SDK sends data back. Hook your device up to an intercepting proxy and start up a few apps. 99% of them do this. I really wish Apple would put an end to this.

Is this automatically part of any app using react/react native?

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#53
post #2

> There is nothing in the privacy policy that addresses [that data is being sent to Facebook] > The Zoom app notifies Facebook when the user opens the app, details on the user's device such as the model, the time zone and city they are connecting from, which phone carrier they are using, and a unique advertiser identifier created by the user's device which companies can use to target a user with advertisements So Zoo…

The good thing is that this is illegal in the EU, so they can just be sued for problematic amounts of money.

They can’t be sued. They can be reported to a proper privacy authority who can chose to do something about it or not.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#54
post #26

EVERY. SINGLE. APP. THAT. INCLUDES. THE. FACEBOOK. SDK. Even if you don't log in. The Facebook SDK sends data back. Hook your device up to an intercepting proxy and start up a few apps. 99% of them do this. I really wish Apple would put an end to this.

Is this automatically part of any app using react/react native?

No. React and React Native are totally separate from the Facebook SDK.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#56

The world is facing such a massive crisis, people are getting laid off, and here on HN/Vice, they are discussing why a VC app is sending an anonymized link to Facebook.

Does it really make sense to call it a "VC app" when Zoom is a public company worth more than Ford or GM?

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#57
post #42

Earlier quoted context omitted.

Can Apple be held liable by the CCPA as they are a reviewer with a gating process for iOS apps, allowing the Facebook SDK to be included?

That would be quite a stretch of the CCPA. The businesses that are doing the collecting have to have to comply. In this case, Apple isn't collecting that info.

Likely, simply curious if questioning Apple about it is enough for them to nuke the Facebook SDK from further app inclusion at the review process. Privacy is their whole marketing schtick, no? [1] If it's a core value, stand up for it.

[1] https://www.apple.com/privacy/ ("Privacy is a fundamental human right. At Apple, it’s also one of our core values. Your devices are important to so many parts of your life. What you share from those experiences, and who you share it with, should be up to you. We design Apple products to protect your privacy and give you control over your information. It’s not always easy. But that’s the kind of innovation we believe in.")

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#58
I want to see the App Store list what entities a given app might communicate with without explicit user request.

If your SDK feeds FB, it needs to be on the label. If you talk to dodgy surveillance shops, ditto. Making this enforceable (plist authorizations, like microphone permissions) is a little tricky, but at the very least smoking out slimy crap like this would be much easier.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#60
post #32

Earlier quoted context omitted.

I deployed a VPN+PiHole on a micro ec2 instance for use from my iOS devices. Works great. First i installed pihole and configured, then used this https://github.com/jawj/IKEv2-setup to setup the vpn. Took about 30 mins. Works great!

Why do you trust AWS more with your traffic than an ISP?

Because AWS is going to have to answer to pissed off Enterprise customers if there was ever a story to come out that they're handling customer data inappropriately.
Post reply on HN