Of Paths, Contacts, and Privacy
February 15th, 2012Hey There,
There’s been a lot of talk these days around iOS apps and the unapproved transmission of contact data to various web based services. Read about Path’s very public apology here: We Are Sorry. I just wanted to let you all know where I stand on this and how it relates to Tap Forms.
First and foremost, I am shocked to hear about such blatant disrespect for user’s privacy. It could so easily have been avoided as others, such as Matt Gemmell (Hashing for privacy in social apps) have already outlined. It disturbs me to know that without my knowledge, there may be sites out there that have all my address book entries in their databases.
Today Apple announced that this practice is against the iOS developer agreement and that they will be implementing a feature in a future update to warn users when an app is requesting access to the contact database. I think that’s great! It should have been there from the beginning, just as requesting permission to access your location is there now or whether or not you wish to receive push notifications. It’s all a step in the right direction.
So how does Tap Forms deal with user privacy? Tap Forms does access your contact database. But only to make a reference to the contact in there. The only information stored within Tap Forms is the contact ID and the first and last name copied from the contact database. No contact information is ever transmitted unless you explicitly decide to email a record. And even then, it’s only the first and last name which are emailed. I do not and will not ever transmit your contact database to any third party service. However, I cannot guarantee that any third-party services and frameworks that are used from within Tap Forms do this now or in the future.
For example, the first time you use Dropbox from within Tap Forms, Tap Forms is put into the background and the Dropbox app is launched if you have it on your device. From that point, Dropbox may or may not do something with your contact database. I highly doubt they are doing anything with your contact database anyway. I was just using them as an example of one of the ways third party services are integrated into Tap Forms. Another might be the use of Facebook (which I used to have, but removed long ago). Also, at one point in the past I used to use Pinch Media’s (bought by Flurry) analytics engine to see how users were using Tap Forms, which features were most popular, etc. I removed all analytics from Tap Forms over a year ago. So no data about your usage patterns or location is ever transmitted to any third party services by Tap Forms.
There is one area of Tap Forms which has been a small source of confusion for a few users in the past. Tap Forms has a built-in web server and FTP server. These services run directly on your device on your network. The only thing that comes from my web server is the Tap Forms logo and a few other images to make the pages look pretty. This is only when you’re using the web server in Tap Forms. Since there’s no user interface for the FTP server, what you see in your FTP client (such as the awesome Cyberduck) is what you get. All the files that you see in the listings are generated from the list of files that you have on your own device in your own network. My server knows nothing about them.
So that’s about all I think I need to say about this issue.
Thanks for listening!
Brendan








