If you granted permission to read contacts during Facebook's installation on Android a few versions ago—specifically before Android 4.1 (Jelly Bean)—that permission also granted Facebook access to call and message logs by default. The permission structure was changed in the Android API in version 16. But Android applications could bypass this change if they were written to earlier versions of the API, so Facebook API could continue to gain access to call and SMS data by specifying an earlier Android SDK version. Google deprecated version 4.0 of the Android API in October 2017—the point at which the latest call metadata in Facebook users' data was found. Apple iOS has never allowed silent access to call data. -Ars TechnicaLast week, New Zealander Dylan McKay requested his data from Facebook. Upon unzipping the downloaded file, McKay discovered that Facebook had stored around two years' worth of metadata from phone calls he had made or received.
McKay's grandmother emailed him a photo of SMS text messages logged by Facebook.Downloaded my facebook data as a ZIP file— Dylan McKay (@dylanmckaynz) March 21, 2018
Somehow it has my entire call history with my partner's mum pic.twitter.com/CIRUguf4vD
My grandmother emailed me this from her data dump— Dylan McKay (@dylanmckaynz) March 25, 2018
sorry for the potato quality (read: what is a screenshot)
has a number of SMS records, spanning 2015-2017 claims to not use facebook or messenger apps, I have not verified this though pic.twitter.com/Nax5aBUeWQ
Others have reported similar data logged from their devices:I also have these from my grandmother, covering May-October 2017 pic.twitter.com/0T5PSmZNKc— Dylan McKay (@dylanmckaynz) March 25, 2018
Oh wow my deleted Facebook Zip file contains info on every single phone cellphone call and text I made for about a year- totally creepy.— Mat Johnson (@mat_johnson) March 23, 2018
I had a similar issue with mine on Android. Don't have FB installed but I do use Messenger and Instagram. Interestingly they only tracked when I rang my parents and girlfriend. Have never used Messenger in regards to my parents. Weird.— Ben Wigham (@bmdwigham) March 24, 2018
Facebook explained that users' contacts were uploaded in a "widely used practice."I’ve just looked at the data files I requested from Facebook and they had every single phone number in my contacts. They had every single social event I went to, a list of all my friends (and their birthdays) and a list of every text I’ve sent.— Emma Kennedy (@EmmaKennedy) March 25, 2018
"The most important part of apps and services that help you make connections is to make it easy to find the people you want to connect with. So, the first time you sign in on your phone to a messaging or social app, it’s a widely used practice to begin by uploading your phone contacts,” said the company.
“Contact uploading is optional. People are expressly asked if they want to give permission to upload their contacts from their phone – it’s explained right there in the apps when you get started. People can delete previously uploaded information at any time and can find all the information available to them in their account and activity log from our Download Your Information tool.”
- When you install the app, you grant access to:
- Your contacts:
including modification and adding or changing calendar events. They know who is in your phone and can contact them.
- Your exact location:
They know where you are at any time.
- Your camera:
including taking pictures and videos at any time, as well as recording from the microphone. They can get at anything you’re saying or looking at.
- Your text messages, your calls, and they can call phone numbers they find in your phone.
- Your internal storage, including permission to delete anything. They can see the files on your phone.
- Full Internet access anytime, changing your wallpaper, opening up over other apps, and downloading files. They can make little tweaks without your knowledge.
|Facebook is CIA, always has been, still is...|