Path Adds Fresh Security Features to Mobile App

Path, which drew criticism in February over privacy breaches, upgraded the security for its mobile app on Monday.

The iOS and Android upgrade to 3.1.1, announced on Path’s blog, includes the hashing of user contact data so such information will be unintelligible to hackers, at least in theory. Such data, includes last names, phone numbers, email addresses, Twitter handles and Facebook IDs.

Path, a social network that limits users’ networks to 50 people, initiated the new security features after a developer in February revealed that the Mac OS X version of the mobile app was sending users’ entire address book to Path’s servers without telling users. The revelation prompted Path CEO Dave Morin to issue an apology a few days later.

Later that month, reports emerged that Path wasn’t the only company appropriating users’ address books — dozens of other apps for Apple’s iOS were, as well. Apple addressed the controversy with a new rule requiring app makers to seek users’ permission before accessing such information.

Apple’s move came after two members of Congress wrote a letter to Apple CEO Tim Cook in February expressing concern that app developers are accessing and storing data without obtaining user permission. Reps. Henry Waxman and G.K. Butterfield, both ranking members on the subcommittee on commerce, manufacturing and trade, asked Cook to examine the steps required to get data stored on users’ phones.

Original Source
Mobile App Development