Anarchy in the App Store
Path bills itself as a social network that cares about privacy. For a while it was also an App Store outlaw. When iPhone users downloaded it through Apple's popular storefront, the software surreptitiously sent a user's entire contacts list—including e-mail addresses …
Context & Ripple Effects
Path built its brand on being the anti-Facebook — a 'social network that cares about privacy' — which is what made developer Arun Thampi's February 7 disclosure that the app silently uploaded users' entire iPhone address books so corrosive. The backlash that followed (anger through mid-February) forced Path into apologies, and Business Week's account adds the detail that matters for Apple watchers: CEO Tim Cook personally summoned Path co-founder Dave Morin to his office over it.
The episode also lands on an established fault line. In June 2011 Apple had already banned an app for storing iPhone passcodes, showing the company would police misuse of device data — yet Path's app passed review while doing something no reasonable reading of the rules should permit. The breadth of pickup across Apple-centric outlets (MacRumors, 9to5Mac, AppleInsider, The Next Web among them) signals this is being read as an App Store governance story, not just a Path story.
First-order effects
- Path faces immediate trust erosion with exactly the privacy-conscious users it courted, and now has Apple's direct executive attention — Cook's meeting with Morin makes enforcement action against the app a live possibility.
- Apple comes under pressure to explain how an app that exfiltrates the full contacts list cleared App Store review, since iOS at the time required no user permission prompt for address-book access.
Second-order effects
- Other iOS developers quietly building databases from users' address books face the same exposure — once one high-profile case defines the behavior as outlawed, Apple's reviewers and the press have a template for naming the rest.
- Rival social apps can differentiate on consent: explicit ask-before-access becomes a competitive feature against any competitor whose contact ingestion looks like Path's.
Third-order effects
- If the pattern holds, contact data shifts from a free raw input to a gated resource — platform owners like Apple moving toward explicit user-consent requirements for personal data, which restructures how social apps bootstrap their graphs.
- The gap between what Apple's published rules forbid and what its automated review catches points to a durable governance problem: storefront gatekeepers will need process-level permission controls, not just policy language, to enforce their own terms.
The trend: Mobile platforms are moving from permissive developer access to personal data toward explicit, OS-enforced user consent, with App Store scandals acting as the forcing function.