Developer Arun Thampi has discovered that Path uploads the entire iOS address book—email, phone numbers, and all—to their servers. This behavior is obviously a significant privacy concern, especially considering that the app does not ask for permission or give any notice. Path’s CEO David Morin has responded, mentioning that the data is used for connecting with friends and family…
We upload the address book to our servers in order to help the user find and connect to their friends and family on Path quickly and effeciently as well as to notify them when friends and family join Path. Nothing more.
Invasion of privacy is not a subject to be taken lightly, and Morin further states that an update that makes this behavior opt-in is currently pending approval.
Path isn’t the only app that phones home private information, and we hope that application developers find alternate solutions that don’t require uploading personal data. We appreciate Path’s quick response to the issue, and expect that no foul play was intended. But, let this be a reminder that even the most polished and popular apps are capable of nefarious things.