Sarahah harvests your phone contacts for no good reason
Sarahah, the anonymous feedback app that’s been going viral for the past couple weeks, isn’t quite as private as it sounds: it turns out, the app uploads users’ phone contacts to the company’s servers, seemingly for no good reason. The behavior was spotted by security analyst Zachary Julian and first reported by The Intercept.
The app doesn’t entirely hide this behavior. On both iOS and Android, Sarahah asks for permission to access each user’s phone contacts — and even if you say no, you can continue to use the app.
But users who do grant access to their contacts list probably expect it to add some sort of functionality to the app. And as of now, it doesn’t. There’s no friends list inside…
