ChristianKienle/Core-Data-Editor

Core-Data-Editor tries to access user's Contacts and Calendars in the background with no clear reason.

nekoniaow opened this issue · 2 comments

After running the Editor for a few dozens of seconds, even without doing anything in particular, two system popups appear indicating that the application wants to have access to the user's Contacts, then another one appears requesting access to the user's Calendar.

No explanation is given as to why this would be needed and this seems like a clear invasion of privacy.

Having basic respect for the user's privacy instead entail to:

  • Not attempt to use user's private data (contacts, calendar) until the point they are actually needed.
  • Provide a proper written explanation as to why accessing these data is useful to the application's operations.
  • Sign the application with GateKeeper so at least, if the application is found to be corrupted by the OS, it can automatically revoke these authorizations.

Absent these requirements, the application should not attempt to obtain users's data.

Cheers,
Laurent

I don't see anything in the source code that attempts to access either the calendar or contacts. Where did you get your copy of the application?

With Mojave if you try to access ~/Library/Calendars and such, the system shows an alert. There is no need to explicitly ask to access calendars or contacts.
IIRC Core Data Editor scans ~/Library to search for models and such and thus triggers the Calendars pop-up and co.