Arun Thampi is a developer that was looking for ways to port photo software Path to Mac OS X. However he noticed that some data was being sent from the Path iPhone app to the company’s servers. After diving in a bit more, he realized that the Path app was collecting his whole address book including full names, e-mail addresses, and phone numbers. All of this information was being uploaded to Path’s central servers. The app was not notifying people that information was being collected though.
Path CEO Dave Morin with an apology saying “we upload the address book to our servers in order to help the user find and connect to their friends and family on Path quickly and efficiently as well as to notify them when friends and family join Path. Nothing more.”
Morin said that the lack of opt-in was because of an iOS specific problem that would be fixed by the end of the week. The Android app version of Path warns people that contact information that will be pulled. To have information deleted from Path servers, users can e-mail firstname.lastname@example.org.