“The FTC could look at this and find that it is unfair and deceptive,” Ginger McCall, Director of EPIC’s Open Government Program, tells CNBC. “There is a lack of transparency. The company did not inform people what they did with their own data. The FTC could and should do an investigation.”
Closer inspection of Twitter’s privacy policy shows that the company does “log data.” IP addresses, browser types, referring domains, pages visited, mobile carriers, devices and app IDs are collected.
In response, Twitter spokeswoman Carolyn Penner told CNBC in an email that the company plans on updating the text they use in the mobile app.
“We want to be clear and transparent in our communications with users," Penner wrote. “Along those lines, in our next app updates, which are coming soon, we are updating the language associated with Find Friends — to be more explicit. In place of "Scan your contacts" we will use "Upload your contacts" and "Import your contacts" (in Twitter for iPhone and Twitter for Android, respectively).”
In a recent effort to improve user safety, Twitter made HTTP Secure the default setting for all profiles. This secure setting protects user information while encrypting communication and is especially helpful over an unsecured internet connection, like a public Wi-Fi network.
Path, a social media platform that limits one’s connections with 150 people, also ran into trouble this month with how it handled its users’ personal phone contacts. Path later apologized and said it will change its ways.
Mobile users should note that one has the ability to remove contacts from Twitter’s databaseon the desktop website. Once there, you can take solace in the fact that at least the browser is secure.
Twitter’s more than 100 million active users can take solace in the fact that at least the browser is secure.
