The Rewards and Risks of Facebook Developer Access to User Phone Numbers and Addresses

Facebook has begun allowing developers to ask users for their mobile phone number and home addresses in a move that will show the best and worst of the Facebook Platform. Most critics have immediately focused on how greedy developers will request the data in order to spam users, which is a valid concern. But the access will also enable the creation of apps that keep friends connected via SMS and facilitate ecommerce by pre-populating delivery details.

Though the risks are high, Facebook should not impede innovation for fear of spammers, but instead push forward while minimizing negative outcomes by helping users make more informed decision.

Reduce Risk through Clarity

The biggest problem with access to contact information is that the permission requests for these highly sensitive data fields are not distinguished from requests for more benign data like a user’s Event RSVPs or privileges like publishing to their stream. Some apps ask for a stack of a half dozen permissions, so users have learned to blindly click “Allow” to speed through to the desired application rather than read them all, assuming they aren’t giving away anything too valuable, or can revoke access later.

Facebook should slow users down and convey the dangers of permitting access to contact info more clearly by making this request a separate step with a bold warning, rather than a quiet, uniform addition to the list of permissions users are familiar with, as we suggested upon seeing the announcement. This would reduce the threat without forcing Facebook to adopt an unscalable system such as approving developers’ access to this part of the Graph API on a one-by-one basis.

Meanwhile, the change could prompt unscrupulous developers to build apps that intentionally ask for a lot of permissions in order to mask that they are pulling the contact information from unsuspecting users. If they succeed, users will become inundated with spam, blame Facebook for this negative experience, and leading to a drop in quality and trust in the Platform.

It’s important to remember that Facebook has long prohibited developers from sharing any user data with third-parties. Users have been granting permission to some kinds of valuable data, including their current location and email address, without widespread problems.

When there have been issues, such as when data broker Rapleaf and developers were caught buying and selling User IDs that did not even contain private data, Facebook has policed accordingly. Data privacy is an inherent problem with developer platforms, but the issues are balanced by the benefits generated by the fun and useful apps that live on them.

One troubling fact is how Facebook announced this major change. Instead of in a dedicated post with mention of the potential risks, it was merely part of a weekly dispatch about bug fixes and migration deadline extensions — with no commentary on its impact. It was published on Friday evening of a three-day weekend,  at 8:16pm PST, diffusing immediate feedback, and later the post’s timestamp was changed to 6:00pm. If people are going to trust that the site has their well-being in mind, Facebook needs to concentrate on mitigating risks for users, not minimizing backlash to itself.

The Rewards of Mobile Phone and Address-Aware Apps

There are many benefits to allowing developers to ask users for their contact information. Mobile phone number access could power apps that act as up-to-the-minute communication hubs between groups of friends, allowing members to be notified by SMS when friends are nearby, want to plan an event, or upload new content. Home address access could let ecommerce sites pre-populate delivery details during checkout, leveling the playing field so smaller merchants can compete with established giants like Amazon that have already forced users to type in their address manually.

Other potential apps could allow you to share an electronic business card with others; get text message updates about group deals, news, or game activity; discover businesses that are close to home, or instantly sign up to receive physical catalogs or coupons via snail mail. While Facebook’s hasty development might challenge the beliefs of some, it doesn’t make sense to delay these useful additions in an attempt to protect users.

Many technologies come with associated risks. Airplanes crash and medicines have side effects, but these advances as well as platforms like Facebook’s, are the future. The user base will need education so they understand how to recognize and assess risks for themselves, and this first incarnation of mobile phone number and home address extended permissions doesn’t provide it. However, Facebook is doing the right thing by giving users the choice of what to share, even if it is currently doing it in the wrong way.

Mediabistro Job Fair

Mediabistro Event

Mediabistro Job Fair

Join us on January 27 at the Altman Building in New York City for an incredible opportunity to meet with hiring managers from the top New York media companies, network with other professionals and industry leaders, and land your next job! Register now!


Leave a Reply

20 Responses to “The Rewards and Risks of Facebook Developer Access to User Phone Numbers and Addresses”

  1. Kevin Mc says:

    Good post, Josh.

  2. Chris Turitzin says:

    It doesn’t seem like the risks for users are too great. Even though spam snail-mail, SMS, and calls would be very annoying, they are costly and fairly regulated channels.

    It seems that this is a incremental improvement on the platform for a couple of niche apps, like Josh mentions.

  3. The Rewards and Risks of Facebook Developer Access to Mobile Phone Numbers says:

    [...] > Continue reading on Inside Facebook. [...]

  4. David F says:

    Sorry above all Facebook has done, I feel this is the most sinister. Unwitting young folks may accidentally grant home addresses to to unsavory elements. This is really an outrageous thing they have done here. Time will prove it.

  5. Robert Basil says:

    I am outraged at the way this was “not” announced to the members and have suggested that all of my readers at remove their home address and phone number from their profiles.

  6. terri williams says:

    Users are not children and don’t need to be treated as such. “Users will need education…” What a condescending remark. We don’t need help making informed decision. What we do need is for Facebook to stop making money at our expense. We didn’t give Facebook our phone numbers and addresses so Facebook could use it for their benefit. What you’re doing is reprehensible and will cost you a chunk of your user base, starting here.

  7. Paul M says:

    It’s not about “information wants to be shared”, it’s about “we want to make money sharing your information, and we will tell you it’s for your own good, and you will believe us.”

    Facebook is worth $25 billion only because of its earnings POTENTIAL, not because of its actual earnings. It could easily suffer the same fate as MySpace, losing millions of users who have found other things to do.

  8. Facebook’s latest privacy whoopsie | FFS Team USA says:

    [...] The blog Inside Facebook, which obsessively tracks news about the social networking giant, says the new addition doesn’t provide users with enough context. [...]

  9. Gibizz News » Facebook gives apps access to addresses and phone numbers says:

    [...] The blog Inside Facebook, which obsessively tracks news about the social networking giant, says the new addition doesn’t provide users with enough context. [...]

  10. Bootup: Canadian startup visa initiative, LOLcats gets major cash | FP Tech Desk | Financial Post says:

    [...] it started doing over the weekend, first reported in Monday’s Bootup). Following an intense flurry of protest, Facebook has suspended the feature for the time being. However it does plan to start [...]

  11. | Blog | Facebook Allows Access to Your Phone Number and Address says:

    [...] was botched as only developers were notified of the privacy change.According to the blog, “Inside Facebook,” the problem is these permission requests for sensitive private data are not distinguished [...]

  12. jdml says:

    I’m not a developer, but I have to ask: why can’t there be a pick and choose selection of access when you give “request for permission”?

  13. Facebook、批判を受けて住所と電話番号を第三者と共有するプログラムを一時停止 says:

    [...] ところが、その承認を求めるダイアログ・ボックス(下を参照)の文言があまり分かりやすいとはいえず、Facebookはまたしてもプライバシー問題に関して強い批判を浴びることになった。 [...]

  14. Facebook Clueless About Privacy « Education and Technology says:

    [...] The Rewards and Risks of Facebook Developer Access to User Phone Numbers and Addresses – Inside Facebook 1/17/11 [...]

  15. Josh Constine says:

    @jdml: Developers can set up seperate allow steps if they want to so that users can decline permissions that aren’t necessary for the app to run. Facebook could make this separate step mandatory.

  16. fluff says:

    Seriously? There are no “rewards” for this. This does not “do” anything extra that can already be done.

  17. Josh Constine says:

    @Fluff: I believe the functionality is new. Please explain how users could already automatically share their mobile phone number and address with applications?

  18. Oneupweb : Facebook Is Not Giving Away Your Phone and Address | Oneupweb : StraightUpSocial Blog says:

    [...] and home addresses to developers of applications and third party websites. When the media broke the news about this new development, my phone rang off the hook and my inbox was flooded with “did you see this?” [...]

  19. Facebook Allows Access to Your Phone Number and Address « Blogging Cafe says:

    [...] to the blog, “Inside Facebook,” the problem is these permission requests for sensitive private data are not distinguished [...]

  20. Following Complaints, Facebook Puts Address And Number Sharing On Hold says:

    [...] (see below) wasn’t super clear about that, so Facebook was unequivocally opening itself up for a new sh*tshorm to hit the [...]

Get the latest news in your inbox
interested in advertising with inside facebook?

Social Media Jobs
of the Day

Social Media Specialist

Kensington Publishing Corp.
New York, NY

Web & Social Media Analyst

Chicago, IL

Interactive Marketing Manager

Phoenix, AZ

Communications Specialist

Humanscale Corporation
New York, NY

Engagement Editor

The Center for Public Integrity
Washington, DC

Featured Company

Join leading companies like this one and recruit from the nation's top media job seekers on the Mediabistro Job Board. Every job post comes with our satisfaction guarantee. Learn More

Our Sponsors

Mediabistro A division of Prometheus Global Media home | site map | advertising/sponsorships | careers | contact us | help courses | browse jobs | freelancers | content | member benefits | reprints & permissions terms of use | privacy policy Copyright © 2014 Mediabistro Inc. call (212) 389-2000 or email us