Sarahah has been the talk of the town for past couple of weeks. The mobile app lets users share anonymous feedback with their friends and family members. The popularity of the app could be gathered by the estimated number of downloads from the Apple App Store wherein it became the third most downloaded free software for iPhones and iPad. However, it turns out that Sarahah may not be as private as the makers of the app had promised it to be.
A report by The Intercept quotes security analyst Zachary Julian saying that the app is secretly uploading the details of the users’ email and phone book contacts on to its servers. Julian, who is a senior security analyst at Bishop Fox, discovered this featured when he installed the app on Galaxy S5 smartphone which was running on Android 5.1.1. Interestingly, the app was doing the same for the devices running on iOS.
So, does this that you are safe if you haven’t used the application in a while? NO. Julian found that even if you haven’t used Sarahah in a while, it will still share all your contacts again.
Soon after, Sarahah founder Zain al-Abidin Tawfiq tweeted that the app asked for contacts for ‘a planned “find your friends” feature’ which was delayed due to a technical glitch. He further added that the app will remove the data request with the next update.
When first launched, this app harvests and uploads all phone numbers and email addresses in your address book. https://t.co/MOfzqQ9KmI
— The Intercept (@theintercept) August 27, 2017
ALSO READ: Sarahah: Here’s all you need to know about this anonymous messaging app
Sarahah has projected itself as an “honest feedback app” that lets its users strengthen the areas of improvement at work and while letting them be honest with their friends. While on iOS, the app says that it needs to access the users’ contacts to show who has an account on the platform; on Android, the app seeks permission to access contacts without giving any reasons for the same. However, it does not mention uploading the contact info on the servers on either of the operating systems.
Sarahah App asked for contacts for a planned “find your friends” feature
— ZainAlabdin Tawfiq (@ZainAlabdin878) August 27, 2017
ALSO READ: Sarahah founder says he learned programming from Indians
Furthermore, in its privacy policy, the app states that it would seek users’ consent if it plans to use the data. Also, even on giving the permission to access contact info, the app does show the users who in their contact list are using the app on iOS devices. At this point, it remains unclear, what the makers of the app plan to do with the info. However, if you are concerned about the privacy of your data, you can go on the website and remove your account.
It was delayed due to a technical issue. The database doesn’t currently host contacts and the data request will be removed on next update.
— ZainAlabdin Tawfiq (@ZainAlabdin878) August 27, 2017
For interesting tech videos from InUth, follow us on Youtube.com/InUthdotcom
