My source is this Tumblr post, which caused me to check my settings because I just got the latest major update.

I found these settings enabled in my discord app:

I know ideally one wouldn’t use Discord at all, but so many of the nice little people in my phone are on Discord.

BTW it’s never a good idea to allow apps access to your contacts, other than your actual phone and SMS apps.

Stay safe!

  • FlumPHP@programming.dev
    link
    fedilink
    arrow-up
    0
    ·
    8 months ago

    The “Sync Contacts” setting is weird. You can toggle it on, but it doesn’t gain or ask for the OS permissions on Android. There’s a brief message saying you have to give it the permission. No idea why they didn’t just use the built in SDK to ask for the permission.

    • Squiddles@beehaw.org
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      8 months ago

      Just to clarify, it’s not just that there’s an Android API to ask for permissions that apps use to show a consistent UI: that’s the way that apps actually get access to whatever feature they’re requesting, and if they don’t go through that API they don’t get access. An app can’t just decide in an update that it wants access to contacts without asking. The Android API to get contact info checks the app requesting the info and won’t give it anything if the user hasn’t explicitly granted that permission to that app. Most commonly when something like this comes up it’s a permission that was granted in the set of permissions requested when the app was installed and the user just skipped through the prompt and they don’t realize they granted access to contacts.

      For the curious, here’s the Android developer guide page that describes how Contacts permissions work for app authors. And the page describing permissions in general, how to request, etc.

      Edit to add: You can go into the settings for the app (not in the app itself, but in the app manager under your device settings, usually also accessible by holding on the app’s launcher icon and going to Info) and you can remove permissions that you’ve granted previously. So if you’re worried about this you can yank the Contacts permissions at the OS level and it doesn’t matter what the Discord settings are, they won’t be able to access your contacts anymore.

    • Link.wav [he/him]@beehaw.orgOP
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      8 months ago

      This whole thing is weird. Two people have commented saying it’s not enabled for them, but I feel certain I didn’t enable it myself, and it was enabled for me after the latest update.

      Edit: Someone in a discord server said it wasn’t enabled for them either so ¯\_(ツ)_/¯

        • Link.wav [he/him]@beehaw.orgOP
          link
          fedilink
          arrow-up
          0
          ·
          8 months ago

          I wonder if this difference in experience might have something to do with privacy laws in different countries. I’m in the US.

          • MJBrune@beehaw.org
            link
            fedilink
            English
            arrow-up
            0
            ·
            edit-2
            8 months ago

            I’m in Washington State. Perhaps it’s something else. I had Nitro and canceled it this year. I don’t remember turning off this specific setting but maybe I did and it’s kept it since? My phone is a S21. I’ve had my Discord account since Dec 2015. The only thing I can think of is that I’ve used my Discord account in California which has slightly different privacy laws than the USA.

            • Link.wav [he/him]@beehaw.orgOP
              link
              fedilink
              arrow-up
              0
              ·
              8 months ago

              My phone’s a S21 as well (well, S21 FE), and I’m in South Dakota. I’ve had my account since 2017.

              Someone from the EU itt reported that they had the settings enabled like I did, so I now think the location hypothesis is wrong. Must be just A/B testing or whatever it’s called, or possibly something more nefarious.

      • HarkMahlberg@kbin.social
        link
        fedilink
        arrow-up
        0
        ·
        8 months ago

        It was disabled for me.

        Stranger still, the other screenshot you posted did have the “Allow contacts to add me” checkbox checked, but it only appears when you tap “Add Friends.” When you leave that screen and return, the checkbox is always checked. It makes me think it’s a setting solely applicable to that screen, like just for the “Find Friends” button, and not to your profile as a whole. IDK if that even makes sense.

      • Fizz@lemmy.nz
        link
        fedilink
        arrow-up
        0
        ·
        8 months ago

        It was enabled for me and I’m very glad I saw this post so I could disable it. I would have never known it existed.