Sarahah, the trending “honesty app,” where you can receive or send nameless texts is not as unidentified as it seems since the app has been discovered uploading the phone contacts of the user on to the servers of the company.
Zachary Julian, a senior security analyst, who operates for Bishop Fox, the IT security consulting company, was the first to find Sarahah uploading personal data, utilizing BURP Suite, a monitoring software. “Once you log into the app, it sends all of your phone contacts and email stored on the Android OS,” a report in The Intercept last week cited Julian as claiming.
Although the app requests for permission of user to authorize contacts, there is no such aspect in the app where these data might be needed or even a search feature where consumers can hunt for a friend by means of a contact number. On the other hand, Zain al-Abidin Tawfiq, founder of Sarahah, claimed that the contact lists were being transmitted for a designed feature named as “find your friends” that was not yet rolled out.
Tawfiq in a tweet claimed that the information request will be got rid of on upcoming update. It habitually appears doubtful if consumers do not get anything out of giving authorization to their contact lists to the apps.
In addition to this, the unidentified texts from the app have made individuals even more interested to discover out what other people feel of them. On the other hand, that inquisitiveness has resulted to some of them making an attempt to find a method to verify who sent them the text. Most of you, if you have got a text saying “Announcement: A lot of people have been asking for a site to reveal anonymous senders. Now here you have it at www.sarahahexposed.com”, do not fall for it, it is a fraud.
The app is just destined to receive and send texts without exposing your personal information; it encrypts all your personal data. These false sites that have began doing rounds are just out to make cash. Once you go to the website, it seem kind of genuine with all the down below real-time comments.