A few days ago, an app called Sarahah on the social networking site became viral. In India too, the magic of this app raised up the head. Praise is an app that allows users to send and receive messages without giving their name. Now the news is that the identity of the person who sent the message to this app is not hidden. Because the application is uploading the user’s contact number to the company’s server.
A senior security analyst at IT Security Consultant Bishop Fox, Zachary Julian, first noticed that the user’s personal information is being uploaded on the server of Sarah. And for this, a monitoring software BURP Suite is being used.
According to a statement from Julian printed on The Intercept on Sunday, “As soon as you log into the app, it stores your email and phone contacts on your Android operating system.”
However, the app allows access to the contact from the user. But there is no such feature in the app where these contacts are not needed and there is no search feature where you can find your friend through contact number.
However, Zain al-Abidin Tawfiq, the founder of Sarahah, said that the contact list has been uploaded for a feature called ‘find your friends’. This feature has not been released yet. In a tweet, Tawfiq wrote that the data request will be removed in the next update.
In the app that receives the message, the incoming messages appear in the Inbox. And you can mark those favors to find them easily, besides flagging, deleting, replying them later. The app can be downloaded for free from Google Play and App Store. Apart from this, the account can also be made on the website if you want to use it on your PC or Laptop.