4 ms·

Given that it isn't uploaded into a database, it shouldn't be a concern for you, and if it is, you better stop using your smartphone because you're already shar

Given that it isn't uploaded into a database, it shouldn't be a concern for you, and if it is, you better stop using your smartphone because you're already sharing it with Google.

electriclove 6y ago
I use Signal and don't like that it wants access to my contact list. I want a better way and if my little voice adds to a call for a better way, great. Don't tell me I shouldn't care.
- Sunspark 6y ago
  You got the better way already. It's not being uploaded into a database.
  - hunter2_ 6y ago
    If a delivery pipeline is compromised such that the APK received through automatic updates in the Play Store no longer matches the published source code, the Contacts permission we already granted allows the app to start exfiltrating our contact lists. People who build from source (or regularly compare Play Store APKs to vetted builds before installing/updating) are the only ones who really have the assurance you're describing. (Substitute other OSes as able.)
    - XorNot 6y ago
      And if the same thing happened to your banking app, or a root level CA... At some point it's a problem I'd like someone to be working on, but taking on a huge amount of individual burden for a low probability scenario isn't anyway to live life. Heck, switching to Signal wasn't high on my agenda list until the Whatsapp TC change suddenly made my entire Facebook Messenger contact list worry about these things - and now I'm completely off Messenger, but it took collective engagement.
      - hunter2_ 6y ago
        I agree completely and I give Signal permission to use my contacts without the due diligence I wrote about. Just treating this more like a logic problem than an advice column, FWIW which isn't much I suppose.
- oarsinsync 6y ago
  It’s fully functional without access to your contact list. You just lose auto discovery of contacts, and need to enter their numbers manually. It’s kinda like being back on ICQ, only without the additional contact search functions. The way I see it, you have three options: 1. Apps that upload your contact list to their server to contact match (like WhatsApp, and others) 2. Apps that use your contact list locally to match (like Signal, and others) 3. Apps that work without your contact list and let you do it manually (like Signal, and others) Are you looking for a fourth option? If so, what is it?
Klwohu 6y ago
How can I make sure of this? In practical fact, I can't.

Given that it isn't uploaded into a database, it shouldn't be a concern for you, and if it is, you better stop using your smartphone because you're already sharing it with Google.

electriclove 6y ago

I use Signal and don't like that it wants access to my contact list. I want a better way and if my little voice adds to a call for a better way, great. Don't tell me I shouldn't care.

Sunspark 6y ago
You got the better way already. It's not being uploaded into a database.
- hunter2_ 6y ago
  If a delivery pipeline is compromised such that the APK received through automatic updates in the Play Store no longer matches the published source code, the Contacts permission we already granted allows the app to start exfiltrating our contact lists. People who build from source (or regularly compare Play Store APKs to vetted builds before installing/updating) are the only ones who really have the assurance you're describing. (Substitute other OSes as able.)
  - XorNot 6y ago
    And if the same thing happened to your banking app, or a root level CA... At some point it's a problem I'd like someone to be working on, but taking on a huge amount of individual burden for a low probability scenario isn't anyway to live life. Heck, switching to Signal wasn't high on my agenda list until the Whatsapp TC change suddenly made my entire Facebook Messenger contact list worry about these things - and now I'm completely off Messenger, but it took collective engagement.
    - hunter2_ 6y ago
      I agree completely and I give Signal permission to use my contacts without the due diligence I wrote about. Just treating this more like a logic problem than an advice column, FWIW which isn't much I suppose.
oarsinsync 6y ago
It’s fully functional without access to your contact list. You just lose auto discovery of contacts, and need to enter their numbers manually. It’s kinda like being back on ICQ, only without the additional contact search functions. The way I see it, you have three options: 1. Apps that upload your contact list to their server to contact match (like WhatsApp, and others) 2. Apps that use your contact list locally to match (like Signal, and others) 3. Apps that work without your contact list and let you do it manually (like Signal, and others) Are you looking for a fourth option? If so, what is it?

Klwohu 6y ago

How can I make sure of this? In practical fact, I can't.