Zoom says it's now disabled a feature that let users covertly access data from some people's LinkedIn profiles, even when they were in the meeting anonymously
After an inquiry from Times reporters, Zoom said it would disable a data-mining feature that could be used to snoop on participants during meetings without their knowledge.
Context & Ripple Effects
The LinkedIn disclosure is the second data-flow finding to hit Zoom within a week: days earlier, its iOS app was reported sending analytics to Facebook through SDKs even for users with no linked account, with a privacy policy that failed to clearly mention the practice. In both cases the behavior only stopped after outside scrutiny rather than internal review.
The timing matters because Zoom is absorbing simultaneous security findings — a Windows client flaw that exposed login credentials via chat links was patched the next day — while enterprise partners like Dropbox were reportedly paying hackers privately to find bugs Zoom had missed. Each disclosure compounds the trust deficit during Zoom's pandemic-scale user surge.
First-order effects
- Meeting participants lose the covert channel entirely: attendees can no longer have their LinkedIn profiles surfaced to other users without their knowledge, including when they joined anonymously.
- Zoom's default posture shifts from silent data enrichment to removal under press pressure — the feature existed until reporters asked, which now becomes part of the company's public record.
Second-order effects
- Enterprise IT buyers evaluating video platforms gain a concrete test case for auditing what third-party data integrations ship enabled by default, raising the bar for rivals' own SDK and enrichment features.
- Regulators now have a documented pattern of undisclosed data flows at Zoom — alongside the Facebook SDK episode — feeding directly into the kind of scrutiny that culminated in the SEC and US attorney offices' investigation of the company's security and privacy practices.
Third-order effects
- If press inquiry remains the primary discovery mechanism for covert data features, collaboration tools will face structural pressure toward opt-in, disclosed data enrichment as a compliance baseline rather than a differentiator.
- The episode illustrates how platform gatekeepers can quietly monetize identity graph access across services — LinkedIn data flowing through a meeting product — until permission boundaries are enforced externally by regulators or disclosure norms harden.
The trend: Video conferencing platforms riding pandemic adoption are being forced to unwind covert data-enrichment features as journalists and regulators tighten scrutiny of undisclosed data flows between consumer identity graphs and workplace tools.