Facebook to tweak contact data sharing

Last Updated: Tuesday, January 18, 2011 | 10:06 AM ET

CBC News

Facebook has temporarily disabled a feature that would allow app developers to access some users' mobile phone numbers and addresses, to help ensure users only share information when they intend to do so. (The Associated Press)

Facebook has temporarily disabled a feature allowing app developers to access some users' mobile phone numbers and addresses if given users' permission.

"Over the weekend, we got some useful feedback that we could make people more clearly aware of when they are granting access to this data," wrote Douglas Purdy on the Facebook Developers blog late Monday.

"We agree, and we are making changes to help ensure you only share this information when you intend to do so."

The feature will relaunch in the next few weeks with the changes, the company said.

Facebook announced Friday it would begin making it possible for developers of games, quizzes and other applications on the social networking platform to request permission to access users' contact details. The information could also be shared with external websites if users agree.

Purdy said that would allow people to streamline the checkout process on a shopping site or sign up for alerts on special deals through their mobile phones.

Analysts raise security concerns

However, Facebook's announcement of the feature concerns analysts like Graham Cluley, a blogger for the internet security software firm Sophos.

"Now, shady app developers will find it easier than ever before to gather even more personal information from users," he wrote on the Naked Security blog on Sunday. "It won't take long for scammers to take advantage."

Cluley said many apps already trick users into agreeing to disclose their data, and access to home addresses could create opportunities for identity theft.

Facebook has come under fire in the past for allowing developers to access too much user data too easily without giving enough information to properly consent.

In June, following an investigation by the privacy commissioner of Canada, Facebook made it mandatory for application developers to:

• Inform users what kind of personal information they require in order to run an application.
• Ask for consent to use the data.

Otherwise, by default, applications can only access public parts of a user's profile.

In October, the Wall Street Journal revealed that at least 10 of the most popular Facebook applications were sending the ID numbers of users to at least 25 advertising, marketing and internet tracking firms.