• Apps that collect or transmit a user’s contact data without their prior permission are in violation of our guidelines. We’re working to make this even better for our customers, and as we have done with location services, any app wishing to access contact data will require explicit user approval in a future software release.
• Apple spokesman Tom Neumayr • In a statement about Apple’s privacy policies, as pertaining to the iPhone. This statement came hot on the heels of the revelation that two Democratic congressman (G.K. Butterfield and Henry A. Waxman) had sent a letter to Apple CEO Tim Cook, requesting information about privacy permissions. The inciting incident here was the iPhone app Path, which was revealed to be uploading users’ address books to their company servers without asking permission, or offering any notification. Path tried to curb the controversy by apologizing and offering an opt-out, but  the damage to their credibility (and, by association, Apple’s) had already hit. And amidst word that a number of widely-used apps — most notably Twitter — did the same thing, Apple has affirmed that what Path did was a violation of their privacy practices, and has released an update for iOS that allows users to delete the database by switching off location services. source

Posted by Chris Tognotti • Permalink