Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Core-Data-Editor tries to access user's Contacts and Calendars in the background with no clear reason. #58

Open
nekoniaow opened this issue Feb 23, 2019 · 2 comments

Comments

@nekoniaow
Copy link

nekoniaow commented Feb 23, 2019

After running the Editor for a few dozens of seconds, even without doing anything in particular, two system popups appear indicating that the application wants to have access to the user's Contacts, then another one appears requesting access to the user's Calendar.

No explanation is given as to why this would be needed and this seems like a clear invasion of privacy.

Having basic respect for the user's privacy instead entail to:

  • Not attempt to use user's private data (contacts, calendar) until the point they are actually needed.
  • Provide a proper written explanation as to why accessing these data is useful to the application's operations.
  • Sign the application with GateKeeper so at least, if the application is found to be corrupted by the OS, it can automatically revoke these authorizations.

Absent these requirements, the application should not attempt to obtain users's data.

Cheers,
Laurent

@sjmadsen
Copy link

I don't see anything in the source code that attempts to access either the calendar or contacts. Where did you get your copy of the application?

@Frizlab
Copy link

Frizlab commented Aug 16, 2019

With Mojave if you try to access ~/Library/Calendars and such, the system shows an alert. There is no need to explicitly ask to access calendars or contacts.
IIRC Core Data Editor scans ~/Library to search for models and such and thus triggers the Calendars pop-up and co.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants