I remain a WhatsApp curmodgeon

My six days in Barcelona for MWC had me using one app far more than usual: WhatsApp. But while I often delight in seeing people route their communications out from under the control of incumbent telecom operators, every time somebody asked me to message or call them in that Meta-owned app, I felt a little more grumpy.

That’s because WhatsApp continues to lack a feature found on any 1970s Trimline phone or on a turn-of-the-century, five-line-display cell phone: You cannot text or call a random set of digits unless you first let this app ingest your entire contacts list.

My phone's screen shows the Android system permissions dialog asking if WhatsApp should have access to my contacts, with MWC attendees in the background.

As WhatsApp says in two of the more shameful dialogs around: “To make a call, allow WhatsApp access to your contacts” and “To help you message friends and family on WhatsApp, allow WhatsApp access to your contacts.”

I got tired years ago of apps making sweeping demands for my data and don’t see any reason for contacts upload to be a prerequisite to pinging somebody I just met and may never run into again, so I keep declining that request.

WhatsApp’s FAQ item about contact upload makes a respectable argument for its stewardship of this data, saying it doesn’t collect non-phone-number contact details and deletes the numbers of non-WhatsApp-using people after saving a cryptographic hash of their digits for future cross-referencing should they join later.

But WhatsApp’s parent firm has racked up quite a list of privacy violations, some of which led to the Federal Trade Commission hitting it with a $5 billion fine in 2019 that still stands as a record penalty.

And that WhatsApp FAQ item doesn’t even try to answer why without contacts permission, the app won’t let you punch in any random phone number to start a chat or call. Or how if you revoke that permission, it will stop showing the names of contacts–a creepy move that in 2019 Fast Company’s Michael Grothaus called “one of the most manipulative things Facebook does with WhatsApp.”

In the U.S., being a WhatsApp contacts-access refusenik isn’t so bad, because most people still use carrier texting services. But in the rest of the world, historically higher carrier prices for messaging have made WhatsApp far more widely used. And at MWC that led to some awkward moments.

Most of the time, I could socially engineer my way out of them by asking my new acuaintance to message me from their copy of WhatsApp, at which point I could reply from my copy. One MWC attendee then pointed me to the option to have WhatsApp show a QR code that other people can scan to add you to their contacts lists.

And after coming home, I learned of the click-to-chat option in which you can type in a wa.me Web address in your phone’s browser that ends with a contact’s number (no dashes or spaces) to have the app open a chat thread with that individual.

It’s good, I guess, that WhatsApp provides workarounds for its own demand for the data of people who may have zero interest in seeing their numbers get uploaded even briefly. It would be better if WhatsApp would show a little humility and end this gropey, growth-hacking nonsense.

Advertisement

Weekly output: standalone 5G, Facebook’s outage (x2), cruise-industry information security, Instagram and teens, Mark Vena podcast, startup sustainability, Microsoft report on digital attacks, NSO whitelists U.K. phone numbers

I’ll be spending two days in Philadelphia at the end of this week to attend the Online News Association’s Insights conference there. It’s been more than two years since I’ve met most of my ONA pals, but it’s also somehow been more than 10 years since I last set foot in Philly–and that previous visit only consisted of a connection in PHL on my way home from my final business trip for the Post.

Screenshot of the article as seen in Chrome on an Pixel 3a phone10/4/2021: In a slow race to launch standalone 5G, T-Mobile stands alone for now, Light Reading

My editor suggested I take a closer look at the big three carriers’ plans to deploy standalone 5G–meaning connectivity that doesn’t lean on a carrier’s 4G signal to set up the connection–and that proved to be an excellent suggestion.

10/4/2021: Facebook’s giant outage, Al Jazeera

This happened on sufficiently short notice that I not only didn’t have time to set up my tripod, I also didn’t have time to shoo my cat out of his spot in my office lounge chair. I hope Abel appreciates the exposure.

10/5/2021: Facebook’s Outage Was No Laughing Matter Outside the US, PCMag

In much of the rest of the world, Monday’s Facebook outage would be more accurately described as “Monday’s WhatsApp outage.” I used this post to recap how aggressively Facebook has worked to cement WhatsApp as an e-commerce foundation in markets like India–sort of like WeChat, but not operating subject to the Chinese Communist Party.

10/5/2021: Tabletop exercises with cruise execs needed to tackle data breaches, Seatrade Cruise News

Seatrade’s Holly Payne wrote up the second panel I moderated last week at their conference in Miami Beach.

10/6/2021: Instagram and teens, Al Jazeera

AJ apparently was not tired of my insights about Facebook, so they had me on a second time to discuss the Wall Street Journal’s recent reporting about Facebook studies that found Instagram left a dent in the self-image of about a third of teenage girls.

10/7/2021: S01 E12 – SmartTechCheck Podcast, Mark Vena

I rejoined my industry-analyst friend’s podcast to discuss, among other things, Facebook whistleblower Frances Haugen’s testimony on 60 Minutes and before the Senate’s Commerce, Science and Transportation Committee.

10/7/2021: How Not to Fail at Scale, Ascent

I returned to the conference at which I spoke IRL in 2019 and virtually in 2020 to interview Chargebee CEO and co-founder Krish Subramanian about how to run a startup for the long term.

10/8/2021: Microsoft: Digital Attacks Are Getting Worse, Russia Bears Much of the Blame, PCMag

More pass-the-vodka bad news about information security.

10/9/2021: NSO spyware no longer targeting U.K. phone numbers, Al Jazeera

AJ called upon me yet again to discuss the Guardian’s report that the Israeli spyware firm NSO blocked its Pegasus software from targeting the U.K.’s 44 country code, an apparent response to Dubai’s ruling sheikh using NSO’s tools to go after his ex-wife and her lawyer in Great Britain. My responses were heavily informed by a Washington Post investigation published in July that showed NSO had no hangups over selling its services to such repellent customers as Hungary’s authoritarian regime.

Updated 10/27/2021 with a link to and embed of the Ascent talk.