/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR ▲
TEXXR

Chronicles

The story behind the story

← → days · ↑ ↓ browse · Enter similar · o open

Path uploads your entire iPhone address book to its servers

[Update]  —  Dave Morin, the CEO of Path has responded in the comments and I've pasted it below.  As an aside - never in my wildest dreams did I imagine this to blow up like this.  I hope we can keep calm and continue to discuss this sensibly.

Arun Thampi

Context & Ripple Effects

Path built its brand as the small, trusted network — the company former Facebook platform chief Dave Morin co-founded with Napster's Shawn Fanning after leaving Facebook in 2010, and which wired itself into Facebook's graph via a December 2010 integration. Developer Arun Thampi's finding that the iPhone app ships users' entire address books to Path's servers strikes directly at that positioning.

The story traveled fast for a single blog post: Uncrunched ('just nuke all the data'), Gizmodo, The Next Web and Lifestream Blog all picked it up on the same day, and Morin was forced to respond publicly in the comments — confirming the upload while framing it as friend-matching, with an opt-in fix promised.

First-order effects

  • Every Path user's contacts sit on Path's servers without clear disclosure, and Morin has to commit to an opt-in model and decide what happens to already-uploaded data under immediate public scrutiny.
  • Apple faces the question of why App Store review let an app harvest the full address book silently — the iOS permission surface, not just Path, is on trial.

Second-order effects

  • Other social and messaging apps that quietly sync contact lists now face the same audit, since Thampi's method is reproducible against any app touching the address book API.
  • Apple's incentive to gate address-book access behind an explicit prompt hardens, which would force every contact-syncing app to re-engineer onboarding and disclosure.

Third-order effects

  • If the pattern holds, contact data shifts from a free raw input for social-graph building to consent-gated data, raising acquisition costs for every app whose growth loop depends on importing friends.
  • Platform owners rather than individual developers become the de facto privacy enforcers — App Store rules, not app-level promises, become where disclosure standards actually get set.

The trend: Mobile social apps are colliding with the limit of silent device-data harvesting, pushing address-book access toward explicit, platform-enforced consent.

Related: Dave Morin · iPhone · Anger for Path Social Network After Privacy Breach · Anarchy in the App Store · Path and Facebook ‘Hook Up’

Related Coverage