U.S. v. Path

Citation
United States v. Path, Inc., No. C13-0448 (N.D. Cal. Jan. 31, 2013) (proposed consent order) (full-text).

Factual Background
Path operates a social networking service that allows users to keep journals about "moments" in their life and to share that journal with a network of up to 150 friends. Through the Path app, users can upload, store, and share photos, written "thoughts," the user's location, and the names of songs to which the user is listening.

Complaint
The Federal Trade Commission charged that the user interface in Path's iOS app was misleading and provided consumers no meaningful choice regarding the collection of their personal information. In version 2.0 of its app for iOS, Path offered an "Add Friends" feature to help users add new connections to their networks. The feature provided users with three options: "Find friends from your contacts"; "Find friends from Facebook"; or "Invite friends to join Path by email or SMS." However, Path automatically collected and stored personal information from the user's mobile device address book even if the user had not selected the "Find friends from your contacts" option. For each contact in the user's mobile device address book, Path automatically collected and stored any available first and last names, addresses, phone numbers, email addresses, Facebook and Twitter usernames, and dates of birth.