Photo and journal iOS software Path’s practice of uploading contact lists to its servers without first informing users has sparked talk and concern over how mobile apps handle personal data. Path had taken entire address books and uploaded them to their servers in what Path CEO Dave Morin describes as a way to “help the user find and connect to their friends and family on Path quickly and efficiently as well as to notify them when friends and family join Path. Nothing more.”
The major driving force behind this change was California’s Online Privacy Protection Act, which now applies to mobile apps according to California, USA Attorney General Kamala Harris.
There’s no hard timeline on when the changes must be implemented, but the Attorney General’s office will meet with each company in about six months to review, so it’s likely these changes will be in place by then. Kamala Harris promised that California would sue companies and developers who don’t take this policy seriously.