[madeofpalk]

Users that used the ‘CA’ mydigitallife app did consent, but the millions of other profiles that they were able to scrape in definitely didn’t consent.

[734786710934]

This gets to the debate around if you can consent when giving up information about your friends. For example, is it OK for someone to give a company access to their phone's address book when the people in it haven't consented themselves?

[vuln]

Reminds me of Facebook and LinkedIn shadow profiles.

[madeofpalk]

(which have been deemed illegal in some countries)