So I have read the responses and it seems that there are a few schools of thought here and I just want to make sure that I understand the possible solutions.
Per user Steko is this the ultimate solution to the problem -
(0) we get your permission (is this in the ULA, the in app screen? The privacy page of the app?)
(1) we check for your contacts in our database (hashing your contacts). The method of hashing yet to be determined or what info to hash and match if anything other than the email address or maybe the phone number.
(2) we let you know if any matches are found.
(3) we throw away all your data afterwords.
My question is - do you go through steps 1,2,3 each time that you boot up the application or click the add connections button. Compare the hash, report on the matches and dump the rest? Rinse and repeat?
Is the issue more the keeping the address book for later matching, or the passing it in the clear part?
If you were going to have an opt-in or disclosure what would you want it to say?
Per user Steko is this the ultimate solution to the problem -
(0) we get your permission (is this in the ULA, the in app screen? The privacy page of the app?)
(1) we check for your contacts in our database (hashing your contacts). The method of hashing yet to be determined or what info to hash and match if anything other than the email address or maybe the phone number.
(2) we let you know if any matches are found.
(3) we throw away all your data afterwords.
My question is - do you go through steps 1,2,3 each time that you boot up the application or click the add connections button. Compare the hash, report on the matches and dump the rest? Rinse and repeat?
Is the issue more the keeping the address book for later matching, or the passing it in the clear part?
If you were going to have an opt-in or disclosure what would you want it to say?