A few weeks ago, an app called Sarahah on the social networking site became viral. In India too, the magic of this app raised up the head. Praise is an app that allows users to send and receive messages without giving their name. Now the news has come that the identity of the person who sent the message to this app is not hidden. Because the app is uploading the user’s phone contact to the company company’s server.
A senior security analyst at IT Security Consultant Bishop Fox, Zacchari Julian, first noticed that the user’s personal information is being uploaded on the server of Sarah. And for this, a monitoring software BURP Suite is being used.
According to a statement from Julian printed on The Intercept on Sunday, “As soon as you log into the app, it stores your email and phone contacts on your Android operating system.”
However, the app takes permission from the user to access the contact. But there is no such feature in the app where these contacts are not required and there is no search feature where you can find your friend through contact number.
However, Zain al-Abidin Tawfik, the founder of Saraha said that the contact list has been uploaded for the upcoming ‘find your friends’. This feature has not been released yet. In a tweet, Tawfik wrote that the data request will be removed in the next update.
In the app that receives the message in this app, all the incoming messages are displayed in the inbox. And you can mark those favors to find them easily, besides flagging, deleting, replying and posting them. The app can be downloaded for free from Google Play and App Store. Apart from this, the account can also be made on the website.