Page 2 of 3

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 9:16 am
by admin
Likely the app needed to check for your registration info, if you're a Pro version user.

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 9:44 am
by lk
I'm a Pro user of the PC version, my Android version is the free version. (Can I upgrade to the Pro version without a Google account?)

If the option to opt-out of Google snooping does only work for the Pro version, you should grey-out or remove this checkbox in the free version. On my phone (Android 5.1), this option currently looks like a placebo (which could possibly violate GDPR, but IANAL).

(It's a real pity that you gave up your former privacy-friendly approach at some time!)

lk

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 9:52 am
by admin
The option for sharing analytics data works as for the Pro as fro the Free versions. Were there any other requests to outside IP addresses except for the very first one after the update?

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 9:54 am
by lk
Yes, there were. One request every few hours.

lk

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 11:08 am
by a8907433
Hello ik!
(Can I upgrade to the Pro version without a Google account?)
Yes, there is. I use my smartphone with deactivated Google playstore, Google services and so on. I wrote an email to Astonsoft Support, how to pay, and how to activate AEPIM pro, they told me. Do the same!

Re: Some serious privacy concerns

Posted: Mon Jan 06, 2020 11:54 am
by admin
Thanks! Will double check whether there's any remaining and unaccounted for requests left in the code.

Re: Some serious privacy concerns

Posted: Tue Jan 05, 2021 8:47 pm
by lk
While this seems to have been corrected with an update at some time in the past year, the new v5.8 of EPIM for Android obviously reintroduced it: Immediately after the update (and several times since then) it wanted to contact a Google IP despite the fact that I have deactivated this Google Analytics stuff in the settings.

lk

Re: Some serious privacy concerns

Posted: Fri Jan 15, 2021 9:11 am
by lk
Any news concerning the aforementioned privacy breach of EPIM for Android v5.8?

lk

Re: Some serious privacy concerns

Posted: Fri Jan 15, 2021 9:34 am
by admin
Will check it out.

Re: Some serious privacy concerns

Posted: Fri Feb 19, 2021 1:20 pm
by lk
Some progress on this?

lk

Re: Some serious privacy concerns

Posted: Sun Mar 21, 2021 9:26 am
by admin
Please do the following:
1. Enable the option if it's not enabled at the moment
2. Disable the option
3. Exit EssentialPIM and restart your device
Will the problem be happening after that? If so, mention which instrument you use for getting info about the pockets going out of EPIM.

Re: Some serious privacy concerns

Posted: Sun Mar 21, 2021 4:08 pm
by lk
I did as you requested and indeed, no further connection attempts have appeared since then. So it could be fixed, at least for now.

However, I haven't touched this option for a long time and nevertheless the connection requests reappeared at some time in the past. How can I be sure that this will never happen again in the future?

lk

Re: Some serious privacy concerns

Posted: Mon Mar 22, 2021 11:45 am
by admin
All right, good to know, thanks! The problem likely appeared again when we switched from the legacy to the latest analytics library version. Shouldn't be happening anymore in the future.

Re: Some serious privacy concerns

Posted: Mon Mar 22, 2021 12:12 pm
by lk
Sorry to have to report that, but the connection attempts reappeared some hours ago! I haven't changed anything in the settings.

See this screenshot:
EPIM.jpg
This is an excerpt from the protocol of "No Root Firewall". The green lines indicate allowed outbound connections. The red lines indicates connection attempty blocked by the firewall. This app has worked reliably since I started using Android devices and works without having to root the device (it installs a local VPN).

Have you ever thought about dropping this analytics stuff completely? If you are interested in crash reports, there are other means to give the user the possibility to report them (e.g. by sending an e-mail prefilled with the stack trace like some other apps do). This way you get rid about any GDPR-related legal problems (sending data to non-EU countries although the user deliberately opted out of this could be a serious offence and I'm not sure if "software bug" or "switching a library" would serve as an excuse.)

lk

Re: Some serious privacy concerns

Posted: Tue Mar 30, 2021 6:48 pm
by lk
EPIM for Android v5.8.1 just came in in my tablet (Android 8.1) and upon start of the new version (you'll guess it:) my firewall again recorded a connection attempt to some Google server.

So it's still not fixed. Pity.

lk