topic Re: new permissions requested? in Features

new permissions requested?

Good2U — Tue, 27 Sep 2016 16:30:20 GMT

Just got offered the 2.0.4 update for Android (5.1). The changes list "bug fixes". Nothing more.

So why does the app now want additional permissions of location and device ID & call information?

I can't believe nothing changed, but mute permissions are required!

So which is it, Netgear?

Re: new permissions requested?

Good2U — Fri, 08 Apr 2016 19:37:48 GMT

*more permissions, not "mute permissions"

Android 2.0.4 "bug fix" release

MarkDoubleYou — Fri, 08 Apr 2016 22:40:24 GMT

Why does today's "bugfix" release (2.0.4) suddenly need access to my Android device's location? That's a new permission that tells me that there's more than just bug fixes happening here... On the surface it seems pretty shady - - an explanation is warranted!

Re: Android 2.0.4 "bug fix" release

jguerdat — Sat, 09 Apr 2016 13:49:44 GMT

I agree. Perhaps it's for a future enhancement, such as geofencing or troubleshooting why someone has issues with a particular server? Without explanation, it's hard to guess.

Re: new permissions requested?

demetreb — Tue, 12 Apr 2016 14:43:43 GMT

Why is the new Android OS update requesting location info AND caller ID and call history information???? There's absolutely ZERO need for arlo to require caller ID and call history from a device in order for security cameras to function unless we are tredding into the realm of government requirements to access remote cameras. Please please explain this arlo / netgear

Re: new permissions requested?

demetreb — Thu, 14 Apr 2016 01:48:30 GMT

I don't think netgear/arlo really wants to answer this question regarding new permissions. 3 other threads and no response from Jamesc.

Re: new permissions requested?

Good2U — Thu, 14 Apr 2016 17:11:01 GMT

I sent the question by email just minutes ago. Will post back what I hear.

Re: new permissions requested?

demetreb — Sun, 17 Apr 2016 04:05:35 GMT

Please do.
I have a reeling it may be related to the "chinese" market and the country's big brother over watch, but why not have a different set of rules for that market/country vs a global/ blanket software ? If that were the case then why not state it..?

Re: new permissions requested?

njcust — Sun, 17 Apr 2016 15:09:25 GMT

The Arlo Android app actually talks back to China constantly, as it is configured to use the Baidu simple notification service. See my note below:

https://community.netgear.com/t5/Arlo-Idea-Exchange/Arlo-Android-app-uses-Baidu-Notification-rather-than-Amazon/idi-p/1073747

Re: new permissions requested?

demetreb — Sun, 17 Apr 2016 16:35:45 GMT

Then arlo needs to adjust this update to reflect the needs of the western market and not blanket their updates for the chisel market. Poor decision making imo

Re: new permissions requested?

demetreb — Sun, 17 Apr 2016 16:36:09 GMT

Chinese not chisel

Re: new permissions requested?

MarkDoubleYou — Tue, 19 Apr 2016 16:40:40 GMT

No response from JamesC yet? His "release notes" for version 2.0.4 are suspiciously quiet, too.

Re: new permissions requested?

Good2U — Wed, 20 Apr 2016 14:07:03 GMT

No responses here or via email. Terrible customer service! Probably time to post some negative reviews at Amazon, Best Buy, etc.

I would never buy or recommend this product until the permissions are explained. Also I'm not liking that the notification function is apparently routed through China!

Very troubling!

Re: new permissions requested?

JamesC — Wed, 20 Apr 2016 21:08:05 GMT

I am working with our product managers to clarify the need/intent of these additional permissions within the Arlo Android app. I will post an update as soon as possible once I have more information.

I appreciate your patience,

JamesC

Re: Android 2.0.4 "bug fix" release

MarkDoubleYou — Wed, 20 Apr 2016 22:25:21 GMT

     Perhaps it's for a future enhancement, such as 
     geofencing or troubleshooting why someone has
     issues with a particular server?

[Netgear exec, scribbling down notes] "Oooh nice... ok, and then what should I tell them?"

Re: Android 2.0.4 "bug fix" release

TomMac — Thu, 21 Apr 2016 12:40:06 GMT

move on ... nothing to see here. 🙂 It would be nice to have an answer, but don't hold your breath.

It is what it is, either use the app or don't is ALWAYS your choice.

Re: Android 2.0.4 "bug fix" release

MarkDoubleYou — Thu, 21 Apr 2016 18:30:45 GMT

> "It is what it is, either use the app or don't is ALWAYS your choice."

I'm going to respectfully disagree with the "is what it is" sentiment for a few reasons:

1. This is no longer the product we decided to buy.

2. This is very personal information.

3. And finally, a more nuanced argument: With companies like Google I understand the tradeoff I'm making with respect to privacy: I get stuff for free, and in exchange they get to collect all kinds of information about me (thus the platitude was born that Google's users aren't their customers--we're their product). But with Netgear we most certainly are their customers--we gave them *hundreds* of dollars for this system, and when it actively and deliberately misbehaves in a way that may not be in customers' interests then we shouldn't give them a free pass.

Re: new permissions requested?

demetreb — Mon, 25 Apr 2016 03:26:14 GMT

Mark double you. Fantastic response! Kudos!!!
I too agree.
Tomac Yes we can choose to not use the app but we didn't pay just for hardware did we?
The argument can next move to cameras remotely activating from China. The answer cannot be choose to not use the cameras. BTW ( we had to agree on the last upgarde for net gear to allow federal agencies access to cloud stored information/video. Again i commented without any arlo / negear response )

Re: Android 2.0.4 "bug fix" release

regisannoying — Tue, 26 Apr 2016 16:17:39 GMT

MarkDoubleYou wrote:
Why does today's "bugfix" release (2.0.4) suddenly need access to my Android device's location? That's a new permission that tells me that there's more than just bug fixes happening here... On the surface it seems pretty shady - - an explanation is warranted!

I noticed this too.

Netgear needs to be forthcoming about the intended usage of this additional information. I'd like to hear an explanation of how this is simply a "bug fix" as they claim.

Re: new permissions requested?

MarkDoubleYou — Wed, 27 Apr 2016 23:10:21 GMT

I use the Cyanogen variant of Android and allowed the Arlo 2.0.4 "bug fix" upgrade to go through, but I configured Cyanogen's "Privacy Guard" to prompt me whenever Arlo tries to get my location. In the last 10 minutes since I upgraded, the app asked Android for my location twice, even though Arlo isn't running in the foreground. So there you have it... this isn't some benign, unusued permission: Arlo knows where you are.

Looking forward to JamesC's explanation.