9 ms·
A subtle change to the iPhone’s contact-sharing permissions
- luna4151 2y ago[dead]
- allears 2y agoSeems to me that social app devs sound a bit entitled. If their business model depends on slurping up all my contacts, maybe they need to find a new line of work.
- km144 2y agoI tend to agree—however I think the point of the article is that, regardless of whether this an ethical or "good" practice, it represents a pulling up of the ladder in a social media landscape that most users would agree is not in a great place with regard to the big names. Maybe we already have enough social media apps, but also maybe the ones we have aren't very good, and things like this probably make it harder to compete in that space if you believe that you can create something better. Also to be clear, while I'm sympathetic to that idea I'm not sympathetic to garbage people like Nikita Bier, who is basically saying this is what helped enable him to make two identical apps marketed directly to high-schoolers rapidly acquire a substantial userbase. He then subsequently sold these apps to Meta and Discord. So maybe this change is for the best. https://www.reddit.com/r/Entrepreneur/comments/12rqnk6/nikita_bier_got_5m_users_in_2_months_with_a_0/ https://www.reddit.com/r/Entrepreneur/comments/12rqnk6/nikit...
- _aavaa_ 2y agoI don't think pulling up the ladder is the correct analogy here. The inability of users to prevent companies from slurping up all of their contacts creates an environment which greatly benefits those company which simply take the data since nobody can stop them. Yes having that data has allowed the current crop of social media companies to grow very quickly, but look at the societal costs of that rapid growth. If we want social media companies of a categorically different kind, we need different rules so that the kind we currently have don't dominate again.
- ryandrake 2y agoYea, this is more of a "better late than never" security fix. While you can't go back in time and fix past apps that exploited a vulnerability, you can at least close the vulnerability for future apps.
- the_snooze 2y agoYou also fix it for future users. Kids without phones or contact lists grow up to have them.
- throwaway48476 2y agoIt's going to require a legal fix for past mistakes.
- throwaway314155 2y agoThat reddit thread made my soul hurt.
- Terretta 2y ago> pulling up the ladder On the contrary, it allows users to better than current "all or nothing" which today leaves users holding their nose and feeling forced by social monopolies into feeding their entire graph to resell to advertisers, data brokers, government monitors, and the like. Note that a minority of social apps have done the work to match your contacts with your contacts' affirmative disclosure on the social network, without giving themselves new shadow contacts from your phonebook. Only those who "want to be found" will match up. > So maybe this change is for the best. It's possible to ... slurp respectfully? If everyone did that, this feature wouldn't be needed. If EU wanted to legislate something, they could mandate something like an extrovert flag: this is my name tag, I want to be found! Given an app respecting this method of matching, then allow matching to be seamless after the first OS level prompt.
- mihaaly 2y agoNoo! They shouldn't try finding new ways to carry on! There is a huge risk that they will do!
- iamcalledrob 2y agoThis also affects communication apps, like email clients. It's a real bummer for the user experience, honestly. Yes, people can say "share all contacts", but the user experience is confusing, and many people won't. This means that all 3rd party mail and messaging apps will be lacking contact information -- whereas of course Apple's own will have it by default. Again, it's shameful API design by Apple, because they don't have to use their own APIs/permission systems. This could be mitigated, by the way, by having a rate-limited "lookup" API where an app can say "Can I have the contact for bob@example.com, if it exists?". Most legit apps don't need a copy of your entire address book, but they may need to query it occasionally.
- laurex 2y agoSays a lot about our world that to be successful with a 'friend-based app' you really need to dark pattern your way into hijacking a contact list and robo-inviting all the people who are totally not a person's friends.
- moi2388 2y agoSnapchat. They even add contacts after you didn’t add contacts, no idea how they manage that exactly..
- htk 2y agoEven worse is an article from a major newspaper having "mixed feelings" about the feature.
- sureIy 2y agoIf you paid attention, every single successful social app got so successful because of dark patterns that could be summarized as: spamming you and your contacts.
- barbazoo 2y agohttps://archive.ph/bzyTn https://archive.ph/bzyTn
- drpossum 2y agoIf that's what social apps need then I really really hope so.
- dmitrygr 2y agoiOS18 finally does what should have been done all along: ability to tell the app it has access to contacts while not actually giving it access to the entire list. Let me clear: fuck any app that demands to slurp up all my contacts and purposefully makes it hard to use it without allowing that (looking at you, WhatApp), and any developer who does it. If this is the end of the world for them, good riddance!
- linotype 2y agoWhat feature is this? Sounds great.
- diebeforei485 2y agoIn iOS 18 you can allow apps access to only some contacts instead of the entire contact book. This makes sense. I don't want apps to know who my doctor is, especially considering many apps share this data with others (including, in some cases, governments). https://support.apple.com/guide/iphone/control-access-to-contacts-iph9536aa9a5/ios https://support.apple.com/guide/iphone/control-access-to-con...
- jiveturkey 2y agoplease, please let them do fake location next
- shiroiushi 2y ago>iOS18 finally does what should have been done all along: ability to tell the app it has access to contacts while not actually giving it access to the entire list. This seems like a mis-feature to me. iOS shouldn't be lying to apps like this. If an app shouldn't have access to all your contacts (which it shouldn't), then why is Apple approving such an app in the first place? I thought the whole selling point for iOS was the strictly controlled and curated app store.
- isametry 2y agoIt should definitely by lying like this, because that information routinely gets abused to force you into just giving full access. Apple could totally be more strict with the App Store, and eliminate contact-stealing malware such as: - Instagram - WhatsApp - FB Messenger - should I go on?
- nonameiguess 2y agoAre these apps intended for use only by kids or do they fundamentally misunderstand what a contacts list is? Due to the enormous volume of spam sent to any person who has ever owned property or voted in the United States, the only real solution is never answer a phone call from an unknown number, and consequently put every business and contractor you ever expect to hear from into your contacts list. These are not actually my friends. Many of them are organizational numbers, many are numbers I have not called or been called from in 15 years, many of them likely long ago went out of service.
- chatmasta 2y agoThe new social apps will just need to hijack the contact lists of the old social apps. Anyway, this has already been happening — it’s not just phone contacts that products use to bootstrap their network.
- Bluescreenbuddy 2y agoOh boohoo. Poor devs.
- chambored 2y agoThe article is hyperbolic, and I can’t believe we’re in a situation where Apple is giving users more control and privacy and folks are complaining that their app won’t work. If your app relies on unmitigated access to personal contacts and users begrudgingly say yes then maybe you’re part of the problem.
- dvngnt_ 2y agoAndroid needs this yesterday. i hate how meta, tiktok, telegram and other apps try to force you to give contact info. even when you deny, they'll just ask again later.
- jjtheblunt 2y agotelegram has repeatedly asked me for microphone access on iOS the last few weeks, at random times. i suspect it's not just happening on Android, therefore.
- sureIy 2y agoSay yes, then deny the system permission. At this point, iOS does not allow you to change those permissions in-app once you deny them. The only exception is photo access, which lets the app request access to more photos.
- h0l0cube 2y agoEven when you deny, enough of your contacts won’t that it doesn’t even matter
- meowster 2y agoIt does matter. Is this what you meant?: "Even when you deny, enough of your contacts won’t, that it seems in vain."
- _aavaa_ 2y agoAn improvement, but each contact is still all or nothing. If an app needs phone numbers and I want to share that with it, I don't need it to have access to the birthdays, emails, addresses, etc. of all the contacts I share.
- chambored 2y agoExactly. It’s more granular, but not granular enough. Also, what if I don’t want my name and contact information in someone’s phone shared with an application? There are no options there.
- yieldcrv 2y agoIt’s common amongst women to just not save phone numbers anymore from low commitment encounters On iOS they rely on memory, context along with the name and photo sharing feature Maybe men in the same age range and contexts do the same, but I wouldn’t know
- 2OEH8eoCRo0 2y agoIt's disgraceful that we can't even keep a contacts list these days. Back in the day we had no problem with putting everything into Outlook or something but today things will steal it. We have moved backwards, regressed. We bought these devices and can't even trust them! It's bullshit!
- _aavaa_ 2y agoIt's worse than going backwards. A real rolodex never sent out your personal information. A primate home computer didn't send anything.
- fredski42 2y agoThis is what the Solid protocol tries to fix. https://solidproject.org/ https://solidproject.org/
- shiroiushi 2y agoThese contact lists kinda suck too. Back in the days when everyone used SMS and actually called each other with telephone numbers, they made sense, but now, everyone outside of North America uses various non-interoperable messaging/chat apps to communicate with their friends and family and the contacts don't integrate with these at all.
- joshstrange 2y ago> Now, some developers are worried that they may struggle to get new apps off the ground. Nikita Bier, a start-up founder and advisor who has created and sold several viral apps aimed at young people, has called the iOS 18 changes “the end of the world,” and said they could render new friend-based social apps “dead on arrival.” Oh no! Now apps won't be able to suck up all your contacts and do god knows what with them, what a travesty! /s Good riddance. Every time a social media app moans about an iOS/Android change I count it as a good thing.
- pyuser583 2y agoI remember when LinkedIn would take your contacts, and bombard them with "friend requests." For me it resulted in some inappropriate "requests." I'm glad that isn't happening anymore. At the same time, it's not like LinkedIn is paying any price for that. So the rule is, engage in as much bad behavior as you can when it's permitted, because later it might not be an option.
- ddoolin 2y agoThat is why I do not really use LinkedIn to this day. They are still invasive in the amount of data they collect and share.
- more_corn 2y agoI don’t have LinkedIn on my phone because I suspect they were listening to my microphone and serving me ads based on it. I didn’t dig deep to prove it but it seemed pretty clear at the time.
- iwontberude 2y agoSo you had a bold claim but didn’t put effort in to find commensurate evidence and it was clear to you.
- BLKNSLVR 2y agoBut ended up making the correct decision.
- iwontberude 2y agoUhh not exactly… they aren’t listening to his microphone…
- lcnPylGDnU4H9OF 2y agoA more likely explanation is that LinkedIn knows where you are from location data and they might know where your friends are because they have the app installed (they can otherwise purchase location data that's collected and shared from a billion other apps). Then they see that you and Alice were in the same location for the past hour while Bob, who was also there, was looking up stuff you were talking about on google. Then LinkedIn shows you ads for that stuff because they suspect a discussion had been happening about the things Bob was looking up. A common retort I've seen to that is, "Nobody made any such searches during the conversation." So I try a different route: how does LinkedIn know what's relevant to advertise to you based on conversations that are picked up on your microphone? Let's assume LinkedIn can isolate the voice of every individual on the planet (or, perhaps more relevant, every individual in your home town) and Alice is talking to you about their new air fryer such that it's picked up by your phone's microphone. LinkedIn might advertise air fryers to you because they think Alice was talking to you about air fryers. But what if Charlie is telling Dave -- both of whom you don't know and are only near you because you're waiting in line at the grocery store -- about their new air fryer? LinkedIn can advertise air fryers to you but that won't necessarily be so eerily relevant. How would LinkedIn know to show you air fryers because Alice was talking to you about them but not to show you air fryers because Charlie was talking to Dave about them? Both conversations were picked up by your phone's microphone so, ostensibly, they would both be equally relevant for advertising. (That's all assuming that they can hide the otherwise-inexplicable battery usage of an always-on microphone.) Not to downplay the creep factor, just pointing out that they are probably not disregarding established audio-recording law and are instead doing other surveillance things to show you such relevant advertisements.
- will-burner 2y agoApple killed new social apps. What's the value of a social graph nowadays? Most of the big social media platforms like instagram and facebook that used to present you content based on your friends, now present general content from anyone a la tiktok, and users like it better based on time spent on the app. People interact with their friends via messaging apps. It's not clear to me how a new social media app could use a social graph in a new interesting way. At the same time, I can't help but think that this practice buys lock in for Apple in some way in the form of potentially new iphone features. And it's just veiled as a pro consumer privacy measure. Time will tell.
- nottorp 2y ago> Most of the big social media platforms like instagram and facebook that used to present you content based on your friends, now present general content from anyone a la tiktok, and users like it better based on time spent on the app. They now present you "content" based on the chances to trigger "engagement". And if you chomp on the bait you do end up spending more time in the app. Has nothing to do with Apple though. More with profit.
- tiltowait 2y agoThis is a step in the right direction. I’ve avoided making a Facebook account all these years due to them being at best a garbage company, and it really irritates me they were allowed to just slurp up my contact info because someone I knew clicked “allow” without my consent.
- agiacalone 2y agoI haven't allowed any mobile app permissions to access my contact list since the option became available to selectively disallow permissions on iOS. Why would I subject my friends to extra spam/data mining? I never thought this was a good idea.
- mihaaly 2y ago“the end of the world” "the drama" "dramatic ripple effect" All because serial viral social app developer startups cannot carry on for the next dozen or what new big social app following several sold and successful out there somewhere, must be out there somewhere being very successful, but endangered now very much, right? Am I insensitive not feeling the doom of humanity here? And wanted to lit celebratory fires in the middle of the Armageddon for the further fortification of privacy?
- nightshadetrie 2y agoThis is good given people sometimes glaze over and just opt-in. Contact sharing is dangerous since you can easily reconstruct any individuals social graph (esp big tech), and are unintentionally giving access of your contacts to others.
- mikestew 2y agoRemember when software just did what it said on the tin, and called it day? Now software is too often like the invited guest that proceeds to open your medicine cabinet, and then goes and roots around in the basement for something interesting. No, jackass, we just wanted you over for dinner and some conversation. Same with these apps. “Boo hoo, we can’t root through your contacts anymore, it’s the Appocalypse!” No, jackass, no one ever said it was okay to dig through my contacts, quit acting so entitled.
- Pfhortune 2y agoThe framing of this article is absolutely ludicrous. I'm no Apple apologist but this is genuinely a good feature that puts power to control who gets access to contacts back in iPhone user's hands. "The city is helping citizens install locks on their doors to keep burglars out! That's going to really hurt all the new small-time crooks who might just be starting out!"
- patcon 2y agoWhat if there are less challenges to the current social networks? is that not a more likely outcome, if the equilibrium settles toward stasis and lack of growth? I like my privacy, but I worry the cost for the collective is very high. I worry we'll be less likely to access all the many others ways in which social networks and algorithms and incentives might work, without the helpful pressure on incumbents...
- idle_zealot 2y agoOne of the largest problems that needs to be solved in the space of social networking is flagrant disregard for privacy. Worrying that granting users the ability to protect their privacy may stymie the rise of new companies emerging to abuse their data in order to compete with existing problematic social networks is kinda nuts.
- nkrisc 2y agoI’m not going to lose any sleep from making things harder for data theft startup. The incumbents will have to destroyed in a different way, on another day.
- eviks 2y agoIt's ridiculous to equate all new social media apps with burglars
- throwaway48476 2y agoIf they want to take your stuff and you don't want them to the analogy works.
- herunan 2y agoI’m honestly surprised to see this quality of writing at NYT. Clickbaity headline, ragebaity angle to the story. Of course it’s good to give more options to consumers! In all honesty, I don’t think many people will select a handful of contacts to share with apps. They’re just gonna share all and that’s it. People don’t have the time nor energy to think and select what contacts to share among hundreds in their address book. It’s such a hassle!
- xsmasher 2y agoA lot of the comments are about spamming your contacts, but I assume the common reason is to connect you with people you already know - if a phone number is in your address book, and that number is associated with an account, it can suggest that person to you as a friend. Is there a better way to make that connection without exposing the actual number?
- ctoth 2y agoI'd say by hashing but unfortunately the phone number space is too small. Maybe however Apple's Airdrop to contacts thing works? It's hashing with extra steps AFAIR.
- deleted 2y ago[deleted]
- skydhash 2y agoI don’t want suggestions. I’ve never needed suggestions on any social platforms I’ve been. I usually just ask my friends if they’re on it and what’s their handle.
- ctoth 2y agoI gave Kevin some guff from his article re his reputation with chatbots, but this is remarkably evenhanded (perhaps overly so considering the other side are data-sucking creeptoids.) Just gonna repeat for the sake of Google that Nikita Bier is confirmed by the NYT to be a data-sucking creeptoid.
- georgelyon 2y agoI’m genuinely surprised it took this long for Apple to do this. Having a full contacts list has long been one of the most valuable pieces of information for ad targeting. It’s why you can not be on Facebook but they still know everything they need to know about you because enough of your contacts are on their platforms.
- benoau 2y agoOne possible reason they didn't address it sooner was Apple was receiving a cut of google's ad revenue on iPhone that had grown to 36% share, until Google's own antitrust case deemed the arrangement illegal earlier this year. The more data available to Google the more effective their advertising. /conspiracy
- switch007 2y agoWhy surprised? Because of a belief that Apple care about your privacy? Judge them by what they do, not say
- sureIy 2y agoSurprised because Apple is the company that made this sort of permission request so granular. Contacts contain some of the most permanent and “graph-building” data you can imagine, but they let this through for 17 years.
- vishnugupta 2y agoThe change in question if you don’t want to read through half way across the article. “In iOS 18, however, users who agree to give an app access to their contacts are shown a second message, allowing them to select which contacts to share. Users can opt to share just a handful of contacts by selecting them one by one, rather than forking over their entire address book.”
- weikju 2y agoThank you for that. And it’s about time!!
- spike021 2y agoSounds like how photo sharing permissions have worked since... iOS 16 or 17? You can choose as small a subset of photos for an app to have access to as you want, and then just add as you like, rather than sharing your entire photo library. Pretty handy.
- dangsux 2y ago[dead]
- votepaunchy 2y ago> No bonus points for guessing what type of apps do the latter. Camera apps? In other new “Halide rejected from the App Store because it doesn’t explain why the camera takes photos”. https://9to5mac.com/2024/09/24/halide-rejected-from-the-app-store-because-it-doesnt-explain-why-the-camera-takes-photos/ https://9to5mac.com/2024/09/24/halide-rejected-from-the-app-...
- isametry 2y agoI think these permissions should be handled in a way where the app simply cannot know whether you gave limited or full access. The app should see a pool of items (contacts / photos / health data / whatever) without the information whether that's full access or not. If I understand correctly, apps are only given that info to be able to add a custom `Adjust Selection…` button in a convenient place in the app. But this could be handled on a system level instead, where a small unobtrusive pop-up appears, on top of the app without its knowledge, where the user can adjust permissions (kind of like the `Pasted from…` toast when using the clipboard). It's a bit uglier, but much safer and avoids digging into Settings like you mention. And crummy apps cannot bully you for giving partial access.
- theptip 2y agoThis is a great feature and I’ve been wishing for it for a long time. While the growth hacker dooming is asinine, one legitimate complaint might be that if I have to pick individual contacts I might not remember to select every friend I could import; a nice intermediate solution would be to bring back “circles” aka folders so that I can with a single click grant apps access to all my friends but not by business contacts, say.
- amarshall 2y agoFinally I can see names in WhatsApp, as I now just share the contacts that I actually use WhatsApp with. Meta dark-pattern coerces into sharing all contacts by not showing names on the message list until one does—even though the contact has a name in WhatsApp already.
- igorstellar 2y agoit's a privacy feature. I don't want to share my name with someone who doesn't have my contact.
- skydhash 2y agoWhatsApp have a name field that is public. It just does not want to use it for the chat list. Or allow you to edit it client side.
- amarshall 2y agoNo, it’s not. The name is still visible, but not on the chat list, only the in-app contact card. Thus it’s an anti-privacy feature as it coerces users share all their contacts with Meta.
- Animats 2y agoFinally. Much wining from spam-oriented "social app" operators. World's smallest violin plays.
- dented42 2y agoI don’t understand what part of this I am meant to be opposed to.
- sumuyuda 2y agoiOS has supported selective contacts since a long time, but companies that want to steal all your contact data don’t use it. Now it seems like they have no choice. https://developer.apple.com/documentation/contactsui/cncontactpickerviewcontroller https://developer.apple.com/documentation/contactsui/cnconta...
- sureIy 2y agoWait until they detect you have them partial access and lock the app until you broaden it. See Google Photos: https://news.ycombinator.com/item?id=26472708 https://news.ycombinator.com/item?id=26472708
- eviks 2y agoMaybe by iOS 28 we could also limit which contact fields apps have access to...
- angry_octet 2y agoFinally! WhatsApp forces you to share your address book or it won't run, so I've only ever used it on a burner phone when travelling (because it is essential in some countries). I wish Google would support this too. Now we need location granularity permissions: None-Country-City-Locality-Precise, and the app shouldn't know which one it is getting.
- HeralFacker 2y agoI've had WhatsApp for years and while it does ask for contacts, it works just fine if you deny that permission.
- heinrich5991 2y agoAlmost. You need a workaround for chatting with new numbers and can't add anyone to groups.
- isametry 2y ago• New numbers: fortunately you can just type the number in. • Adding to groups: Sharing an invite link is a good workaround, you need to be group admin though.
- sksksk 2y agoSurely the specific use case could be achieved in some privacy respecting way? For example, you could send hashes of the user's contacts, they could be compared to each other, but not reverse engineered?
- mercutio2 2y agoHashes without salts are useless for preserving privacy. Hashes with salts are also useless for preserving privacy, but at slightly higher than zero computational cost.
- normie3000 2y agoDoes this mean you can now use apps like Truecaller without contributing to their database?
- beagle3 2y agoThis was always possible to some degree - do not allow the access to either “spam blocking API” or contacts. You wont get “live” caller id, but you can check it later in the app.
- paulwilsondev 2y agoi wish we would stop sharing pay-walled content.
- horsawlarway 2y agoNot an apple fan, but this change is a move in the right direction. Part of the reason I use Graphene is exactly this kind of control. https://grapheneos.org/usage#contact-scopes https://grapheneos.org/usage#contact-scopes
- sureIy 2y agoAbout time. They better not let apps lock you out when you only allow 1 contact though, like it happens for photos (see Google Photos)
- binkHN 2y agoGlad to see Apple finally doing this. As an Android developer, who has an app that uses a device's contact information, Google has had something similar for the longest time. Android readily allows a developer to grab very specific contact information for an individual contact without granting an app access to all the device's contact information.
- crashabr 2y agoDoes it? From a user perspective is it possible to see the difference between "giving access to a set of contacts" and "giving your whole contact list away"?
- nerdjon 2y agoEven as a developer, I have started to think that almost any time a developer complains about something they can't do or a safety net on my device. It is likely a good thing that it exists. We saw this with app tracking (just yesterday I saw "we want to keep this app free for you" alert encoruaging me to click "allow" instead of ask app not to track.) This is already how photos works and its long time that contacts followed suit. Hopefully it leads to people being more aware of the data they are sharing but I guarantee that apps are going to throw up scary screens to encourage you to allow all. IF this feature is somehow the thing that is blocking you from making a company, your company doesn't deserve to exist. And I apply that to the social media companies that already exist thanks to being able to mine this data before.
- talldayo 2y ago> Hopefully it leads to people being more aware of the data they are sharing Maybe one day: https://arstechnica.com/tech-policy/2023/12/apple-admits-to-secretly-giving-governments-push-notification-data/ https://arstechnica.com/tech-policy/2023/12/apple-admits-to-... But then again - maybe not.
- iamcalledrob 2y agoAnother example of Apple further entrenching its monopoly -- Like other permission prompts, I bet Apple exclude their own apps from asking for this. I bet iMessage doesn't ask you if it's allowed to access your contacts, in the same way that Photos doesn't ask you which photos you want Apple to know about. That would be an unacceptable user experience for Apple, but acceptable for 3rd party apps. This seems to be a constantly overlooked part of the permissions discussion. I'm all in favor of Apple changing the rules on their platform to whatever they like, as long as their own apps have to play by the same rules. Instead, they use permissions to advantage their apps over the competition.
- Terretta 2y agoNo users think the Apple device with the Apple Contacts app is or should be hiding Apple Contacts app contacts from Apple Mail or Apple Messages app. If you don't want your contacts in the Apple suite, don't put them in the Apple suite. Similarly, if you use Microsoft Contacts, you assume you see those in Microsoft Outlook and Microsoft Teams, and their devices using their OS. Similarly for Google's suite, and their devices using their OS. There are other Contacts apps, such as Clay (from clay.earth) that have other sets of contacts and can sync with still other contacts stores such as, say, LinkedIn. Those aren't visible to Messages without an affirmative action, so Apple is not advantaging itself. If you're arguing that application suites aren't allowed, any number of users are going to be very annoyed with you. If you're arguing that nobody can make both hardware and productivity assistant suite combined, you're either saying the PDA doesn't have a right to exist, or, saying that forcing the PDA to be open to other apps on the PDA in turn means the PDA isn't allowed to be an integrated suite now that it's open, and, I guess, saying Microsoft can't make Windows or Surface unless they spin off Office or damage what they make till none of it talks to each other seamlessly? This entire line of thinking, that nobody's allowed to offer a seamless experience, seems like overregulation of what consumers are allowed to choose and buy.
- iamcalledrob 2y agoThe line of thinking here is that Apple should play fair. The power of defaults is very strong. Most iOS users aren't going to be thinking of "Contacts" as "Apple Contacts". It's just the contacts on their phone. It's their contacts, not Apple's. I think Apple should absolutely have to use the same permission prompts as 3rd party developers -- because this aligns the incentives to design a great user experience. Instead, they have no incentive to design these prompts and APIs well -- in fact, a disincentive.