Path closes contact sharing hole on iPhone, apologizes
updated 04:10 pm EST, Wed February 8, 2012
Path deletes user contact lists, outs Path 2.0.6
Smartphone app developer Path has apologized and fixed the tendency of its app to collect user's entire contact lists to its own servers when the app is first launched. The Android app was already fixed, and now, the developers have released an updated iOS app, version 2.0.6 (free, App Store) that won't upload the data without a user's permission. Dave Morin, Path's co-founder and CEO, also explained that the contacts were used only in the Add Friends features to notify users when their contacts log into the app.
He goes on to say personal information is taken very seriously by the team at Path, and the data was sent over an encrypted connection. It was stored securely on the servers and protected by industry-standard firewalls.
The information was deleted, Morin promises, and the new app will prompt users whether or not they want to upload their contact lists to find family and friends using Path. Those who agree at first and later change their mind can also e-mail Path and have the information removed.
