Path Uploads Your Entire iPhone Address Book to Its Servers ⇥

Arun Thampi:

Upon inspecting closer, I noticed that my entire address book (including full names, emails and phone numbers) was being sent as a plist to Path. Now I don’t remember having given permission to Path to access my address book and send its contents to its servers, so I created a completely new “Path” and repeated the experiment and I got the same result – my address book was in Path’s hands.

I assumed this would be covered in Path’s privacy policy, but this is the only reference I could find:

We actively collect certain information you voluntarily provide to us, such as when you create an account and profile, send us an email or post information or other content to our site.

[…]

For example, we may use personal information we collect:

[…]

• for any other purpose for which the information was collected.

Despicable.