Re: Facebook App
If facebook[sic] does indeed slurp via a baked in app, how does it obtain informed consent to hold data if the user, or someone in the contact list, doesn't have an account?
They can still upload the contact list and use the data to enhance the profile of those that do have faecbook accounts.
Say the phone belongs to person A who does not have an account. Stored on it are contacts B, C & D, C also does not have an account.
Faecbook can add to the data on persons B & D that they are known to the person who owns number <one way hash of phone number of A>. Ditto, one step removed, for C. Because it is a one way hash they are not storing data about A or C, they can claim to meet data storage law.
Should A or C later set up accounts a trawl of the borg computers for matching hash will get the profile off to a good, fat, start. So yes faecbook can store data about A & C without ever having their consent by doing it by association. We can't avoid it but that's no reason to help.