Keep in mind the peculiar disclosure that Facebook was approaching some new clients for the password to their email account? Today Business Insider reports that since May 2016, on the off chance that clients entered their email password, at that point Facebook utilized it to get to their contact list and transfer the content to its servers regardless of anyone else’s input in the matter. In an announcement, a Facebook representative stated:
“…we found that in some cases people’s email contacts were also unintentionally uploaded to Facebook when they created their account. We estimate that up to 1.5 million people’s email contacts may have been uploaded. These contacts were not shared with anyone and we’re deleting them.”
Furthermore, the Business Insider article reads:
“Facebook didn’t access the content of users’ emails, the spokesperson added. But users’ contacts can still be highly sensitive data — revealing who people are communicating with and connect to.
While 1.5 million people’s contact books were directly harvested by Facebook, the total number of people whose contact information was improperly obtained by Facebook may well be in the dozens or even hundreds of millions, as people sometimes have hundreds of contacts stored on their email accounts. The spokesperson could not provide a figure for the total number of contacts obtained this way.”Business Insider
It is reaching individuals who had their contacts transferred, however, it’s one more privacy issue for an organization that has had a long string of them throughout the most recent few years. Despite everything, it doesn’t clarify why the “email password verification” for non-OAuth-linked providers was ever actualized before it quit utilizing the technique a month ago, and gives significantly more support to those distrustful of the organization’s practices and guarantees.
Image via PSafe