Media & Entertainment

Sunshine Contacts may have given out your home address, even if you’re not using the app

Comment

Image Credits: Sunshine

A third-party contacts app you’re not using may be handing out your home address to its users. In November, former Yahoo CEO and Google veteran Marissa Mayer and co-founder Enrique Muñoz Torres introduced their newly rebranded startup Sunshine, and its first product, Sunshine Contacts. The new iOS app offers to organize your address book by handling duplicates and merges using AI technology, as well as fill in some of the missing bits of information by gathering data from the web — like LinkedIn profiles, for example.

But some users were surprised to find they suddenly had home addresses for their contacts, too, including for those who were not already Sunshine users.

TechCrunch reached out to Sunshine to better understand the situation, given the potential privacy concerns.

We understand there are several ways that users may encounter someone’s home address in the Sunshine app. A user may already have the address on file in their phone’s address book, of course, or they may have opted in to allow Sunshine to scan their inbox in order to extract information from email signature lines. This is a feature common to other personal CRM solutions, too, like Evercontact.

In the event that someone had signed an email with their home address included in this field, that data could then be added to their contact card in the Sunshine app. In this case, the contact card is updated in the Sunshine Contacts app, which then syncs with your phone’s address book. But this data is not distributed to any other app users.

Image Credits: Sunshine

The app also augments contact cards with information acquired by other means. For example, it may use the information you do have to complete missing fields — like adding a last name, when you had other data that indicated what someone’s full name is, but hadn’t completed filling out the card. The app may also be able to pull in data from a LinkedIn profile, if available.

For home addresses, Sunshine is using the Whitepages API.

The company confirmed to TechCrunch it’s augmenting contact cards with home addresses under some circumstances, even if that contact is not a Sunshine Contacts user. Sunshine says it doesn’t believe this to be any different from a user going to Google to look for someone’s contact information on the web — it’s just automating the process.

Of course, some would argue when you’re talking about automating the collection of home addresses for hundreds or potentially thousands of users — depending on the size of your personal address book database — it’s a bit different than if you went googling to find your aunt’s address so you can mail a Christmas card or called your old college roommate to find out where to send their birthday gift.

However, Sunshine clarified to TechCrunch that it won’t add the home address except in cases when it determines you have a personal connection to the contact in question.

Here, though, Sunshine enters a gray area where the app and its technology will try to figure out who you know well enough to need a home address.

Before adding the address, Sunshine requires you to have the contact’s phone number on file in your address book, not just their email. That would eliminate some people you only have a loose connection with through work, for instance. And it only updates with the home address if the partner API is able to associate that address with a phone number you have.

Image Credits: Sunshine

In addition, Sunshine says that it’s generally able to understand the type of phone number you have on file — like if it’s a residential or business line, or if it’s a landline or mobile number. (It uses APIs to do this, similar to StrikeIron’s though not that particular one.) It also knows who the phone number belongs to. Using this information and further context, the app tries to determine if a phone number is a personal or a professional number and it will try to understand your relationship with the person who owns that number.

In practice, what this means is that if all the information you had on file for a contact was professional information — where they worked, a job title, a work email and a phone number, perhaps — then that person’s contact card would not be updated to include their home address, too.

And because many people use their personal cell for work, Sunshine won’t consider someone a “personal” relationship just because you have their mobile phone number. For example, if you had only a contact’s name and a cell number, you wouldn’t be able to use the app to get their home address.

The result of all this automated analysis is that Sunshine, in theory, only updates contact cards with home addresses where it’s determined there’s a personal relationship.

This, of course, doesn’t take into account some scenarios like bad exes, stalking or a general desire for privacy. Arguably, there are times when someone may have a lot of personal information for a contact in their address book, but the contact in question would rather not have their home address distributed to that person.

The only way to prevent this, presumably, would be to opt out at the source: Whitepages.com. (Once you have your profile URL from the Whitepages website, you can use this online form to have your information suppressed.)

Image Credits: Sunshine

The way the app functions raises questions about what is truly private information these days.

Sunshine points out that people’s home addresses are not as hidden from the world as they may think, which makes them fair game.

It’s true that our home addresses are often publicly available. Although it’s been years since most of us have had a telephone directory dropped on our doorstep with phone and address listings for people in our city, home addresses today are relatively trivial to find when you know where to look online.

In addition to public records — like voter registration databases — there are web-based people finders, too.

Sunshine’s partner, Whitepages.com, makes visitors pay for its data, but others like TruePeopleSearch.com don’t have the same paywall. With someone’s first and last name and city, its website provides access to someone’s home address, prior addresses, cell phone, age and the names of family members and other close associates. (TruePeopleSearch is not a Sunshine partner, we should clarify.)

Marissa Mayer’s startup launches its first official product, Sunshine Contacts

Even though this data is “public,” it’s uncomfortable to see it casually distributed in an app, as that makes it even easier to get to than before.

Plus, after years of being burned by data breaches and data privacy scandals, people tend to be more protective of their personal information than before. And, had they been asked, many would probably decline to have their home addresses shared with Sunshine’s user base. Generally speaking, people appreciate the courtesy of having someone come ask for a home address, when it’s needed — they may not want an app creeping the web to find it and hand it out.

Sunshine Contacts is in an invite-only beta in the U.S., so the company has time to reconsider how this feature is implemented based on user feedback before it becomes widely available.

More TechCrunch

Strava announced a slew of features, including AI to weed out leaderboard cheats, a new ‘family’ subscription plan, dark mode and more.

Strava taps AI to weed out leaderboard cheats; unveils ‘family’ plan, dark mode and more

We all fall down sometimes. Astronauts are no exception. You need to be in peak physical condition for space travel, but bulky space suits and lower gravity levels can be…

Astronauts fall over. Robotic limbs can help them back up.

Microsoft will launch its custom Cobalt 100 chips to customers as a public preview at its Build conference next week, TechCrunch has learned. In an analyst briefing ahead of Build,…

Microsoft’s custom Cobalt chips will come to Azure next week

What a wild week for transportation news! It was a smorgasbord of news that seemed to touch every sector and theme in transportation.

Tesla keeps cutting jobs and the feds probe Waymo

Sony Music Group has sent letters to more than 700 tech companies and music streaming services to warn them not to use its music to train AI without explicit permission.…

Sony Music warns tech companies over ‘unauthorized’ use of its content to train AI

Winston Chi, Butter’s founder and CEO, told TechCrunch that “most parties, including our investors and us, are making money” from the exit.

GrubMarket buys Butter to give its food distribution tech an AI boost

The investor lawsuit is related to Bolt securing a $30 million personal loan to Ryan Breslow, which was later defaulted on.

Bolt founder Ryan Beslow wants to settle an investor lawsuit by returning $37 million worth of shares

Meta, the parent company of Facebook, launched an enterprise version of the prominent social network in 2015. It always seemed like a stretch for a company built on a consumer…

With the end of Workplace, it’s fair to wonder if Meta was ever serious about the enterprise

X, formerly Twitter, turned TweetDeck into X Pro and pushed it behind a paywall. But there is a new column-based social media tool in the town, and it’s from Instagram…

Meta Threads is testing pinned columns on the web, similar to the old TweetDeck

As part of 2024’s Accessibility Awareness Day, Google is showing off some updates to Android that should be useful to folks with mobility or vision impairments. Project Gameface allows gamers…

Google expands hands-free and eyes-free interfaces on Android

A hacker listed the data allegedly breached from Samco on a known cybercrime forum.

Hacker claims theft of India’s Samco account data

A top European privacy watchdog is investigating following the recent breaches of Dell customers’ personal information, TechCrunch has learned.  Ireland’s Data Protection Commission (DPC) deputy commissioner Graham Doyle confirmed to…

Ireland privacy watchdog confirms Dell data breach investigation

Ampere and Qualcomm aren’t the most obvious of partners. Both, after all, offer Arm-based chips for running data center servers (though Qualcomm’s largest market remains mobile). But as the two…

Ampere teams up with Qualcomm to launch an Arm-based AI server

At Google’s I/O developer conference, the company made its case to developers – and to some extent, consumers –  why its bets on AI are ahead of rivals. At the…

Google I/O was an AI evolution, not a revolution

TechCrunch Disrupt has always been the ultimate convergence point for all things startup and tech. In the bustling world of innovation, it serves as the “big top” tent, where entrepreneurs,…

Meet the Magnificent Six: A tour of the stages at Disrupt 2024

There’s apparently a lot of demand for an on-demand handyperson. Khosla Ventures and Pear VC have just tripled down on their investment in Honey Homes, which offers up a dedicated…

Khosla Ventures, Pear VC triple down on Honey Homes, a smart way to hire a handyman

TikTok is testing the ability for users to upload 60-minute videos, the company confirmed to TechCrunch on Thursday. The feature is available to a limited group of users in select…

TikTok tests 60-minute video uploads as it continues to take on YouTube

Flock Safety is a multibillion-dollar startup that’s got eyes everywhere. As of Wednesday, with the company’s new Solar Condor cameras, those eyes are solar-powered and using wireless 5G networks to…

Flock Safety’s solar-powered cameras could make surveillance more widespread

Since he was very young, Bar Mor knew that he would inevitably do something with real estate. His family was involved in all types of real estate projects, from ground-up…

Agora raises $34M Series B to keep building the Carta for real estate

Poshmark, the social commerce site that lets people buy and sell new and used items to each other, launched a paid marketing tool on Thursday, giving sellers the ability to…

Poshmark’s ‘Promoted Closet’ tool lets sellers boost all their listings at once

Google is launching a Gemini add-on for educational institutes through Google Workspace.

Google adds Gemini to its Education suite

More money for the generative AI boom: Y Combinator-backed developer infrastructure startup Recall.ai announced Thursday it has raised a $10 million Series A funding round, bringing its total raised to over…

YC-backed Recall.ai gets $10M Series A to help companies use virtual meeting data

Engineers Adam Keating and Jeremy Andrews were tired of using spreadsheets and screenshots to collab with teammates — so they launched a startup, CoLab, to build a better way. The…

CoLab’s collaborative tools for engineers line up $21M in new funding

Reddit announced on Wednesday that it is reintroducing its awards system after shutting down the program last year. The company said that most of the mechanisms related to awards will…

Reddit reintroduces its awards system

Sigma Computing, a startup building a range of data analytics and business intelligence tools, has raised $200 million in a fresh VC round.

Sigma is building a suite of collaborative data analytics tools

European Union enforcers of the bloc’s online governance regime, the Digital Services Act (DSA), said Thursday they’re closely monitoring disinformation campaigns on the Elon Musk-owned social network X (formerly Twitter)…

EU ‘closely’ monitoring X in wake of Fico shooting as DSA disinfo probe rumbles on

Wind is the largest source of renewable energy in the U.S., according to the U.S. Energy Information Administration, but wind farms come with an environmental cost as wind turbines can…

Spoor uses AI to save birds from wind turbines

The key to taking on legacy players in the financial technology industry may be to go where they have not gone before. That’s what Chicago-based Aeropay is doing. The provider…

Cannabis industry and gaming payments startup Aeropay is now offering an alternative to Mastercard and Visa

Facebook and Instagram are under formal investigation in the European Union over child protection concerns, the Commission announced Thursday. The proceedings follow a raft of requests for information to parent…

EU opens child safety probes of Facebook and Instagram, citing addictive design concerns

Bedrock Materials is developing a new type of sodium-ion battery, which promises to be dramatically cheaper than lithium-ion.

Forget EVs: Why Bedrock Materials is targeting gas-powered cars for its first sodium-ion batteries