My source is this Tumblr post, which caused me to check my settings because I just got the latest major update.

I found these settings enabled in my discord app:

I know ideally one wouldn’t use Discord at all, but so many of the nice little people in my phone are on Discord.

BTW it’s never a good idea to allow apps access to your contacts, other than your actual phone and SMS apps.

Stay safe!

    • Squiddles@beehaw.orgEnglish
      0·
      9 months ago

      Access to Contacts has to go through the Android API, which means the user has to explicitly grant permission for Discord to access that specific functionality. That’s what the comment you’re replying to meant: access to permissions is protected at the operating system level and they’ve seen the source code on the OS side. Permissions might have been granted by the user reflexively, just muscle memory, when setting up Discord, but it absolutely had to have happened if Sync Contacts was enabled. Unless there’s some kind of bug where Discord enables the in-app setting without actually having the permissions to access contacts–I guess that could be possible. It couldn’t actually see any contact info in that instance, but it would try. If I go into Discord settings and try to enable the Sync Contacts option my phone displays the built-in Android permissions prompt with the text “Allow Discord to access your contacts?”

      • Melody Fwygon@beehaw.org
        0·
        9 months ago

        Unless there’s some kind of bug where Discord enables the in-app setting without actually having the permissions to access contacts

        That’s the bug exactly. It’s kind of a UI glitch; but I found out through Samsung bungling my permissions preferences through a One UI (OTA System) update, that it actually does enable the in-app setting by accident and that this is going to access your contacts if the permission is presently GRANTED, but not throw up a prompt asking for permission if the permission is already DENIED.