Attention iPhone, iPad and iPod-Touch users: Singapore based Arun Thampi found out that the social media App PATH uploads the entire addressbook to the PATH servers without asking the user for permission. You can find more details on Arun’s blog.

Recommendation

1. Update to latest version

If you’re a PATCH user we strongly recommend to update to the latest PATH version, which is being currently supplied via Apple’s Appstore.

2. Tell Path to permanently remove your private data

As of now you cannot forcibly remove your addressbook data from Path’s servers, but you can nevertheless send an eMail to the Path staff (service@path.com). They will “happily” ;-) help you removing your data from their servers. The main question why Path just does not store hashes instead of whole addressbook entries remains unanswered.

More information:

» Arun Thampi’s blogentry: “Path uploads your entire iPhone address book to its servers”
» Path’s website: https://path.com
» Path’s customer support: service@path.com