IMO Apple should provide the user with audit logs of which photos/videos were accessed by each app. It might be a long list but it alleviates doubt and would put huge pressure on reputable developers to ensure they don’t get caught doing things the user wouldn’t have expected (even if the user technically allowed it).
AndroTux · 2h ago
I don’t understand why apps need access to my photos at all. (with some very specific exceptions,) apps should only access a photo, which I first select using the system photo picker. There’s no need for apps to access the entire camera roll just so I can select one photo to use with that app.
I know that that’s partially implemented with the limited photo access now, but it’s confusing from a UI perspective and I don’t understand why this isn’t the default.
The only apps that need full access to my camera roll, are apps like Google Photos, Nextcloud or Immich. Everyone else can suck a lemon.
blululu · 1h ago
To your point there are plenty of apps that explicitly operate on the photo reel so the api/permission is needed.
Steelmanning the point: plenty of apps request photo permissions that shouldn’t need it. This is really an Apple problem though. They have their selective access option which is a patch on the problem inconvenient for the user. I have two apps that end up requesting photo permissions because basic things like saving or loading a photo require the full set of permissions. I would much rather Apple just have a widget that allows me to pipe that data in as a black box, since the pop up message is distracting and I only need the most basic capability. Instead they do some prop 65 warning where even the most basic and reasonable uses trip the warning and what’s app is allowed to scan your entire library with the same permission.
kccqzy · 1h ago
> I have two apps that end up requesting photo permissions because basic things like saving or loading a photo require the full set of permissions.
Absolutely not. Saving a photo does not need the full permissions. If an app does that, the developer is either ignorant or malicious. I see multiple apps that only have "Add Photos Only" permission including apps like Duolingo that.
Similarly the use case of allowing the user to pick one photo doesn't require any permissions at all. Just use the system photo picker. I post reviews with photos regularly on Google Maps and the Google Maps app doesn't have any photo permissions.
dgs_sgd · 1h ago
> plenty of apps request photo permissions that shouldn’t need it
True, and this could maybe be solved by better app store review.
Every app submitted to the app store is reviewed by a human for approval. The reviewers could apply more scrutiny to photo permissions and reject apps whose permissions aren't justified.
kccqzy · 1h ago
The copy/paste feature is underused on iOS. These days if an app needs access to a photo, I try to determine whether the app uses the system photo picker (which doesn't need the app to have photos permission). If it doesn't I simply use the Photos app to copy a photo and then paste afterwards. A benefit is that you can strip location right from the Photos app. With third party apps like Metapho which can be invoked from the share sheet, you can even strip all metadata before copying.
Some apps like WeChat somehow insist on building on their photo picker and they get the copy/paste treatment.
const_cast · 1h ago
Apple should really had a "strip metadata" option directly in the photos picker widget. It would work well with their privacy marketing.
ghostpepper · 16m ago
FWIW I have a free app installed called iVerify that mostly just reminds me when a new iOS is released but recently I noticed they added a "Strip metadata from photo" feature to the sharing tray, so you can pipe a photo through it and then copy to another app.
jamwil · 2h ago
iOS already has exactly the experience you describe and it clearly urges you toward sharing only specific photos.
The only feature request I have is to be able to scope app permissions to an album, since the current flow of selecting individual photos adds a lot of friction.
privatelypublic · 2h ago
Unfortunately, no. It allows you to select which photos an app has access to, and I doubt anybody uses it more than once because of how many taps it takes to include a new photo. Unless I'm missing something.
zimpenfish · 1h ago
> It allows you to select which photos an app has access to
Yeah, that's the "limited access" mode but if the app uses the system photo picker[0], the app doesn't need any photos permission to pick a photo. Blame the app developers for not updating their apps (and this has been available since 2021 - they have no excuse.)
> Apps don’t need to request photo library permission when using either class, so the sample app avoids requesting permission until it’s necessary. A camera app, photo editing app, or library browsing app needs to use much more of PhotoKit‘s functionality, but [[an app that’s only setting a basic profile photo doesn’t need photo library permission]].
You're right, I think a better UX would have been to let me select which photos I want to use like a normal camera roll picker and to just automatically make that photo available to the app requesting it rather than me having to first go and approve which photos to make selectable and then going to select it after.
jamwil · 2h ago
That’s exactly what OP asked for. To select which photos an app has access to using the system picker so they can’t see the whole camera roll.
AndroTux · 2h ago
No. I want to select photos the app has access to now. I don’t want to readjust my selection every time I want to upload a new photo. What I want is an upload button like in the browser.
I click “add photo”, the system dialog opens, I select a photo, and then that gets sent to the app. Somehow, Apple managed to screw that up.
nar001 · 1h ago
Could what you're saying also be basically, you see your whole photos, your whole gallery but the app itself only has access to the one picture you tap on? That way for the user it looks the same as if the app had access to your whole photos, but the app actually only sees the one you select?
Zanfa · 1h ago
> I click “add photo”, the system dialog opens, I select a photo, and then that gets sent to the app. Somehow, Apple managed to screw that up.
That’s exactly how it works for me in iOS at the moment.
In addition, I can see the list of photos each app has been granted access to in Settings > Privacy & Security > Photos.
moi2388 · 2h ago
Well, no. It keeps giving permission to the app, and it’s a lot of clicks to manage.
It shouldn’t give access at all, but use a secure clipboard implementation so that only that app can read it out exactly once.
jamwil · 2h ago
Whether you share it once or in perpetuity is of no practical consequence. They already have the photo at that point.
I agree about the clicks—the UX should be one-shot select and share with the permissions handled implicitly.
moi2388 · 1h ago
It’s about permissions to read out the photo album to begin with, as well as due to it being a pain to change often leading to whole selections of photos being shared
ChrisLTD · 20m ago
Something like "allow app access to last photo" would be ideal for me
hombre_fatal · 1h ago
No, they (and I) want it to work like the web browser file upload component where you don't need to grant permission ahead of time because it's nonsensical.
Imagine if every time you wanted to upload a file online, you first had to allow the one website to access that image first in one menu before you could select the image in the normal file upload menu. That's the UX they're complaining about.
Zanfa · 1h ago
But you don’t have to do it ahead of time. When you click add photo, you get the system picker to choose the photo and once you’ve selected what you wanna grant access to, that’s it. Literally not a single menu needs to be opened, nothing needs to be configured.
Any UX other than this is something the app developer has implemented on top. iOS works exactly like you described.
dd_xplore · 2h ago
Even android has it!
serial_dev · 25m ago
AFAIK Custom photo pickers access your pictures without (hopefully) doing anything nefarious with it. With that said, 95% of apps that do that should just not use custom file pickers.
diggan · 2h ago
> I don’t understand why apps need access to my photos at all. [...] There’s no need for apps to access the entire camera roll
So apps like Google Photos or other alternatives to the Apple made Photos app just shouldn't exist at all, if I understand you correctly?
ipaddr · 11m ago
Google photos stores your photos in the cloud or constantly tries to force you to backup everything to the cloud.
So no it doesn't need permission to manage your local photos. Upload to Google and manage the photos on the cloud if you trust Google while increasing privacy for everyone else.
bbarnett · 2h ago
Did the parent edit their comment? Because your response seems to directly ignore multiple things they said.
diggan · 2h ago
Right now the comment says the same as when I wrote my comment:
> I don’t understand why apps need access to my photos at all [...] There’s no need for apps to access the entire camera roll [...] The only apps that need full access to my camera roll, are apps like Google Photos, Nextcloud or Immich
Which still make me ask the question: They think no apps should access all photos, there is never any need for that, and these app currently do that and they need that, so are they saying those apps shouldn't exist at all?
hdgvhicv · 2h ago
They literally say
“The only apps that need full access to my camera roll, are apps like Google Photos”
Obviously they don’t think the apps shouldn’t exist.
diggan · 50m ago
So again, how does that work when someone also feels like "There’s no need for apps to access the entire camera roll", am I having reading comprehension problems or is there something else going on here?
amanaplanacanal · 39m ago
They listed what they thought should be the exceptions to the blanket statement.
turnsout · 2h ago
Third party photo app developer here. You're right, it's crazy that it's basically all or nothing.
Apple actually has a great API for selecting a single photo in a privacy-respecting way which does not give the developer access to the library at all. [0] But oddly, there is no corresponding API for safely saving or updating a photo in the library. So if your app involves editing a photo, you can't use this API.
The only option you're left with is to request photo library access with that scary dialog.
If the user selects the limited access option, it's not just confusing—it's a prohibitively bad user experience. If the user snaps a new photo and wants to edit it in my app, they have to tap a "Select more photos" button in my app, find the photo in the picker, close the picker, and then select the photo again in my UI.
Personally, I evaluate full access on a developer-by-developer basis. Indie app developers are highly unlikely to nefariously scan your entire photo library, as they lack any incentive or motivation to do so. So I give apps like Darkroom or Halide full access.
Meta, on the other hand, has every incentive to scan my whole library, and I assume they would. So even though it makes posting to Instagram much more painful, I selected limited photo library access for Instagram.
Apple really needs to introduce a safe way for developers to access just the photos/videos users select, and then update those assets.
Not just Apple, Google too. Companies having zero audit trails over files they send to their servers is why I wrote off Windows for good. I noticed Microsoft Defender may randomly send files to be inspected, but there's not audit trail of what files they've sent. This is also why on iOS I force every app to only take files I hand select, I assume malicious intent from all apps. I periodically remove files they're allowed to see back down to 0.
isodev · 29m ago
And risk their revenue? No way. It will come as “privacy preserving on-device-blabla” something that ultimately wouldn’t really protect users, only move the problem elsewhere in the stack. Like any other “privacy” feature of iOS.
h1fra · 3h ago
yeah they do that for location*, they should warn if an app is constantly accessing the camera roll
merelysounds · 3h ago
For what it’s worth, iOS does warn when an app has full access to the photo library for a while. E.g.:
> "WhatsApp" has been able to access your entire photo library for 6 months. Do you want to continue to allow full
access?
Yes, but it's not clear to a regular user that an app can access this camera roll without a user's input.
pimlottc · 2h ago
Do you mean prompting for permission to scan local networks? “Localization” normally refers to translating an app into another language.
h1fra · 2h ago
Sorry I meant "location", when an app is accessing gps too often, they send a notification (e.g: I get a weekly notif for foursquare)
king_geedorah · 2h ago
I believe they are referring to the icon that appears in the status bar when an application is using location services (including in the background).
Jyaif · 2h ago
> would put huge pressure on reputable developers
It wouldn't put any pressure on Meta
wslh · 3h ago
In the iPhone you can select which photos are accessible by apps.
noname120 · 2h ago
It’s a big pain because then you have a double-picker: first pick the pictures in the native dialog asking you to decide which pictures the app should have access to, and then select again the pictures you want but this time in the WhatsApp picker. It’s very awkward.
trinix912 · 2h ago
A solution would be that Apple builds a privacy preserving picker in the OS, then mandates apps use it instead of giving them access to the camera roll and letting them roll their own pickers in the first place.
SSLy · 2h ago
> A solution would be that Apple builds a privacy preserving picker in the OS
there is already one, the enforcement point is what's missing
enigmo · 2h ago
this already exists, many apps use it. I do wish it was mandatory for _all_ apps to use it instead of being optional.
merelysounds · 3h ago
Even better, the app can use the OS image picker and don’t have any other access to photos.
It won’t work for all use cases, but when it works it’s very practical. I’d love to see apps use that as the default - and request additional access only when the user’s current action actually requires it.
Ntrails · 3h ago
I locked whatsapp out of my photos and contacts years ago. If I need a pic I copy paste it in.
Yes it is friction but I simply do not trust the Zuck
znpy · 2h ago
I get your point, but there are so many more evil actors in Meta beyond “Zuck”. Reducing a company to a single person silently excuses all other awful people actively working there
RajT88 · 2h ago
Modern Android has this too. I'm not sure what all distros it's in, since my Pixel 8 Pro doesn't have it, but LineageOS does and so does my cheap ass Motorola G 5G.
Razengan · 1h ago
Apple should also stop letting apps know that we have given them a limited photos or contacts list:
Telegram refuses to work if you provide it with just 1 dummy contact.
Some other clingy apps also get pouty and demand full roll access each time you try to use a photo.
What's even worse: For years, Apple has also allowed many apps including Facebook/TikTok/Tinder to use the "iCloud Keychain" API to store invisible information that tracks you across app reinstalls and EVEN DEVICE RESETS, because it's stored in your iCloud account, and there's no way for you to see what is stored or manually delete it without going through FB/etc and no way to be sure that they are indeed deleting everything.
I've ranted about that a few times but people just shrug it off like wtf (I imagine other people who abuse these APIs want to keep it buried)
ctippett · 1h ago
Have you tried viewing your iCloud keychain on macOS? I'm not sure if it's inclusive of entries made from iPhone-only apps, but there's definitely an option to view entries synced to iCloud for other things.
Razengan · 1h ago
I think I tried that a long time ago, including various tricks to see the hidden folders on the iPhone file system, but it didn't work.
Now I'm not going to install any FB-related app on my new phone to test any other ways, because I'd rather not let them mark that device too if I can help it.
seanw444 · 5m ago
GrapheneOS is too precious. Being able to pretend like the app has full access to my gallery, while only specifically allowing certain directories or photos, is awesome. I've actually discovered that selecting a photo in the gallery and "sharing" it to a Messenger chat skips the need for it to be in the allowed directory, so I've been doing that too. Anyone know if that's working as intended, or if it's a potential security hole?
And yes, putting Messenger on my GrapheneOS phone is dumb, but my normal people friends all use Messenger, so that's where our group chats are. Best I can do is fail to convince them to install an XMPP client and join my self-hosted server, or minimize the impact of Messenger.
reactordev · 1h ago
Meta isn’t just crawling your photos. If you gave it permission not just “While using the app” to anything, it’s gathering up metadata about you and sending it home. Contacts, emails, location, imei, photos, video exif, browser history if you happen to open a mini-safari view from an ad, app usage statistics, your IP address, your device information, anything they can gather - they are.
I uninstalled Facebook, Meta, MetaQuest, Instagram and deleted my accounts. I’ll never put one of their apps on my phone again.
inetknght · 44m ago
> Facebook, Meta, MetaQuest, Instagram and deleted my accounts. I’ll never put one of their apps on my phone again.
Hope you also removed WhatsApp, a very popular chat app especially outside the USA.
I've removed all Meta apps other than Whatsapp (and I don't love that).
I haven't had the Facebook app on my phone in well over a decade. Had Instagram for a while, I was casually active on it, but Meta just keeps convincing me not to be trusted.
Facebook mobile is a suboptimal experience, which is fine, it just reminds me to use it less.
rpgbr · 2h ago
I treat WhatsApp as a hostile app[1], which means I deny any access to my stuff even if I get a subpar experience. In places where it's required (as where I live), this is the bare minimum a privacy-minded person can do.
I just got a new phone and have been using WhatsApp via browser. It's a fight (e.g. you have to force desktop layout) and clearly something they'd prefer you didn't do but ... it's usable. Common actions like sharing photos, replying/reacting to a message, etc. all require multiple taps and futzing with the zoom level but they are possible. There are a few actions, like viewing one-time photos which are not available and the biggest problem is that you're still tethered to a device running a fully fledged version of the app. When your session expires, you're required to authenticate again by scanning a code generated by the native app. Thankfully, my old phone is still functional and this is one of the reasons I'm keeping it around. I'm considering it tainted by Meta and, since I won't be taking new photos or doing anything substantive with it, I guess that's fine.
biinjo · 4h ago
I was going to proudly boast that I don’t have any Meta apps on my phone. Got rid of FB a long time ago, never jumped on the Instagram train.
Then I your post and now I realize I’m still in the Meta world. Forgot about whatsapp for a second.
lazide · 3h ago
There is a reason they paid so much for it. In a lot of the world, they’re essentially required.
Contortion · 3h ago
And next to impossible to get rid of. I would much rather use Signal but convincing even privacy-conscious people to switch is an uphill battle.
reorder9695 · 1h ago
I find a lot of people (including myself) had a pretty bad experience with Signal years ago, and it has put them off using it today.
mrbombastic · 3h ago
Signal is quite good these days for what it is worth. My whole family switched and hasn’t missed whatsapp. That said I am still stuck on whatsapp, it is basically the only messaging app people use in a lot of the world and used by a ton of businesses.
tholdem · 1h ago
Maybe once the ads start showing on Whatsapp it gets easier to convince people to switch.
skylurk · 4h ago
On iOS, whatsapp is weirdly pushy about getting unlimited access to your photo album.
They also go out of their way to make it hard to save a photo without granting full access. Creepy.
agile-gift0262 · 47m ago
On Android WhatsApp also requires access to all media files on the phone in order to use certain features that don't really need them, but that sound plausible.
For example, when you receive an audio message, if you want to listen to it, it will request full media access. Android apps can access media files they have created, so this permission isn't needed. But without granting media access (or tricking it into thinking it has it, like with GrapheneOS' storage scopes), WhatsApp won't let you listen to the audio. Same when trying to open an image full screen instead of just the in-chat preview.
If this were a small developer, I could assume it was done that way accidentally or to cut some corners. Coming from Meta, I can only assume malice.
vladvasiliu · 3h ago
IME giving it "limited access" works well; you can save anything without issue.
What pisses me off, though, is that I didn't find a way to give a contact a name without allowing it access to the phone's contacts.
skylurk · 3h ago
Tested it, and yes, when I increase the access from "Add Photos Only" to "Limited Access" I can add photos again.
But now Whatsapp retains access to all the photos I added unless I go into settings and revoke access to those photos. Creepy.
And yeah the contacts thing also pisses me off. They know what they are doing.
vladvasiliu · 1h ago
> But now Whatsapp retains access to all the photos I added unless I go into settings and revoke access to those photos. Creepy.
I think this is good enough. If you consider they do shady stuff with your pictures, you might as well consider that they hold on to anything they get their hands on right away.
gruez · 3h ago
>But now Whatsapp retains access to all the photos I added unless I go into settings and revoke access to those photos. Creepy.
Not really, given whatsapp could be theoretically keeping a local copy and the operating system can't really do anything about it. It would also be a pretty weird case to code. Imagine writing an app where if you tried to save a file, you couldn't immediately access it afterwards.
skylurk · 2h ago
> Imagine writing an app where if you tried to save a file, you couldn't immediately access it afterwards.
It works fine in other apps such as Signal and even Teams.
I don't really want Moxie or MSFT to have persistent access to any part of my personal photo album either, no matter how good they say they'll be.
ozgrakkurt · 2h ago
My solution to this is to go
Photos -> share photo -> whatsapp
Instead of starting from whatsapp
morsch · 22m ago
I just tried removing the access photos permission entirely from Whatsapp on my Android phone. Then, sharing a photo from within the Photos app pops up the permission dialog in Whatsapp. You need to give it at least the "Limited" permission, otherwise it won't process the shared photo.
Having given it that permission, I can share photos from within Whatsapp as well, without going to the Photos app. I'm not sure if the file picker that pops up is a Whatsapp component (meaning the "Limited" permission is essentially unlimited) or if it's a system component. I mean the latter would make sense, but I'm too cynical to believe it works that well.
orthogonal-wren · 2h ago
What I do is open the photos app and then either copy & paste into the whatsapp message field or use the sharing dialog to share a photo / video on whatsapp. I guess that would also work for the files app.
It’s extra steps but it’s worth it for me.
BLKNSLVR · 1h ago
I only have WhatsApp for communication in a club committee I'm on. I have a whole separate Android profile to maximise it's separation from anything and everything else.
ratg13 · 3h ago
I gave up Samsung Galaxy entirely over this .. even ended up switching to iPhone because I couldn't find another Android I liked as much.
Every Galaxy I ever owned came with uninstallable facebook apps, despite paying over 1k for the phone.
On the last one I had, I went in and did the ritual deleting facebook, and going in the settings to disable their other background apps.
I checked the phone 8 months later, and found that they had installed even more facebook apps that were now running without my consent.
That was the end of those phones for me, and I'm amazed that I put up with it for so long.
bonoboTP · 2h ago
> came with uninstallable facebook apps
You mean ununinstallable.
SoftTalker · 40m ago
unremovable
daedric7 · 3h ago
While I still have WA installed for unrelated reasons, I'm so happy for Matrix Bridges...
hypersoar · 2h ago
Years ago, I installed the Facebook app on my phone. I immediately uninstalled it when I saw, horrified, that it had hoovered up all my photos and uploaded them to Facebook (there was no fine-grained storage permission at the time) "for my convenience". I never ran their app on my phone, again.
cj · 4h ago
This should be a non-issue if you use Apple’s privacy settings to limit Facebook to only have access to the photos you want to use.
I’d highly recommend never granting any app full access to your photos.
gessha · 3h ago
Apple should improve the UI of this photo selection because it’s very cumbersome to scroll and select the same photos twice.
subarctic · 25m ago
I think they have because with chatgpt you click the photo icon and it uses the system photo picker to pick a photo. I guess Meta deliberately isn't implementing that
Clent · 3h ago
Agreed. The feature set is in desperate need of the search option both on approved photos and when attempting to approve additional photos. Very often I have to go into the photos app, find the photo, make a mental record of approximately where it is in history and scroll scroll scroll. Obnoxious and cumbersome.
jkubicek · 2h ago
What I really want is to create a special photo album for (Facebook/Instagram/Slack/etc.) and have it automatically gain access to whatever photos I put in there.
loumf · 4h ago
You should do this for apps even if you trust them.
One issue with permissions is that they apply to the entire app, including any third-party dependencies. Lots of apps use libraries given to them by advertising services -- they notoriously exploit permissions given to the app.
lloydatkinson · 3h ago
WhatsApp used to (still might) default to saving all photos from any chat to your phone. This led to some very surprising and unwanted photos being saved to my iPhone gallery. What a stupid idea.
kergonath · 2h ago
I think it’s off by default and you can activate it separately for each discussion.
const_cast · 1h ago
The problem is people have to actually do this, and it's cumbersome.
The solution is just straight up banning apps from the app store which request full photos permissions but only need a picker.
Whatsapp only needs a picker, it's not Google photos. Just make that part of the developer terms and start banning low hanging fruit and the apps will confirm in no time.
afarah1 · 3h ago
Android also has limited photos access nowadays.
jcomis · 1h ago
maybe they changed it, but last time I checked I could not upload on instagram on Android with limited access. It required full access, plus camera/microphone in order to post.
abcd_f · 3h ago
That's on newer iOS versions and, by extension, on newer Apple devices only though.
rimunroe · 3h ago
Photo library permissions have been around since iOS 14. As long as you have an iPhone made in the last ten years you should be able to use it.
bigDinosaur · 3h ago
Apparently this functionality was released in iOS 14, which was supported by the iPhone 6S, released in 2015, so any phone in the past 10 years should have support for it. That seems reasonable enough.
Workaccount2 · 2h ago
Meta is by far the most shamelessly insensitive tech giant. They must actively seek out the most morally depraved devs, I can only imagine the people in those meetings when discussing some of these implementations must have been laughing at how devious they are.
seanw444 · 18m ago
The devs get paid a fine salary, and can't afford it lose it, or they'll probably miss payments on their expensive vehicles and houses. So they do as they're told and don't complain.
matsemann · 1h ago
A few years ago I scrolled Facebook on my phone and suddenly saw a post with a picture from my phone and my heart skipped a beat. It was not a real public post, but a suggestion from fb ala "share this pic with your followers? This is how it will look like".
Immediately removed all permissions, insane to take a photo from my camera roll and do that. Imagine if it was some nsfw picture suddenly being integrated into my feed while scrolling in public or so..
polytely · 2h ago
Facebook seems like an exceptionally morally rotten company, which I guess just stems from Zuck being in control.
petralithic · 2h ago
Some of these comments are interesting to read. Haven't we learned from Cambridge Analytica in 2018? Or the various other scandals over the past 20 years? I can understand normal people not caring but how people on HN still use Meta apps is beyond me.
awesan · 2h ago
By definition they are social apps, so it's not usually up to just individuals whether to use them. For example if I stopped using what's app I'd cut myself off from the majority of my friends and family.
frasermarlow · 2h ago
If you're not paying for it, you are the product.
TheRoque · 1h ago
Mmmh well a few months ago there was a news that Facebook will prompt you to ask you if you are ok with your personal pictures being used for training, so it's not really surprising ?
Besides, it's meta, what do people expect seriously ?
jkubicek · 2h ago
Facebook has been doing this for well over a decade. I once got a notification from the Facebook app, "Do you want to share this photo with Kim?" because Kim was just randomly in the distant background of a photo I had taken of my daughter at kindergarten drop-off. I deleted the Facebook app that day and I make a point to never give any social media app access to my photo library.
markus_zhang · 2h ago
One way to deal with the current mess is to use a dumb enough phone only for banking/insurance/chat, a dumb phone for calling and texting, and a camera for photos. It’s less convenient but it’s better for privacy.
inetknght · 40m ago
> and a camera for photos. It’s less convenient but it’s better for privacy.
Hope you don't use Microsoft or Apple products to manage the photos on your Camera.
everdrive · 4h ago
I finally got around to rebuilding my pihole. My wife's phone as absolutely rife with requests for various Real-Time Bidding (RTB) domains. It was a flood of them like I really haven't seen before. I didn't do much troubleshoot, but when we looked at her phone, the Facebook app seemed like the likeliest culprit. (Facebook, after all would be the best-placed to have the user data required to actually participate in RTB.)
Once we deleted the app, the RTB requests went away for good. I've had pihole previously, and she's had the Facebook app previously, and we never seemed to have this issue. Perhaps Facebook is drudging up whatever profits it can since it's mostly cornered the population, and is potentially in decline.
No comments yet
matt_s · 3h ago
Meta can't scan my phone if I don't install Meta's apps on my phone.
A web browser on the phone removes the need for a lot of "apps".
randycupertino · 2h ago
I need whatsapp to communicate with global KOLs for work.
const_cast · 33m ago
If you're running android I believe you can set up a work profile with its own apps. On graphene you definitely can, with its own filesystem and everything.
I wouldn't install work programs directly on my devices without some kind of sandboxing because of cases like this.
belinder · 1h ago
Shouldn't they be required to offer a work phone if they require you to install an app on a phone? It may depend on where you live
randycupertino · 56m ago
My company provides us with a $100 a month cell phone stipend instead of giving us phones.
mikewarot · 1h ago
A gentle reminder to the readers here at HN that it doesn't have to be this way. Computer Security is a solved problem[1], and has been so since the 1980s[2].
It's my strong opinion that the only methods you've seen to this point[3-7] were deliberately chosen to be ones that don't work, and make things worse in the long run.
It's my hope that things will change for the better, but when I think about what group could lead that change, there's No Such Agency.
Some years ago I stopped used Snapchat, because Snapchat would occasional notify me a "highlight" with a picture from my camera roll. To do that it meant that Snapchat need to have all my pictures on their server, I figured. Not what I signed up for.
Havoc · 3h ago
Better yet - use the phones built in app restrictions to block or selectively allow photo access.
When a corporate does shady shit the last thing you'd do is trust the tools they provide to limit that. That's just insane.
>"People just submitted it. I don't know why. They 'trust me'. Dumb fucks." -Mark Zuckerberg
terminalshort · 2h ago
You trust the tools because one of the few things the company can actually get in trouble for is outright lying.
amanaplanacanal · 21m ago
They might actually get fined a small amount!
gmd63 · 2h ago
Zuckerberg: Yeah so if you ever need info about anyone at Harvard
Zuckerberg: Just ask
Zuckerberg: I have over 4,000 emails, pictures, addresses, SNS
[Redacted Friend's Name]: What? How'd you manage that one?
Zuckerberg: People just submitted it.
Zuckerberg: I don't know why.
Zuckerberg: They "trust me"
Zuckerberg: Dumb fucks
Instant messages sent by Zuckerberg during Facebook's early days, reported by Business Insider (May 13, 2010)
emchammer · 1h ago
They’re not, and they can’t, because I don’t use Meta.
imhoguy · 30m ago
They can much more than you can imagine. I bet you have installed at least one 3-rd party app with Facebook SDK bundled in and profiling you. https://news.ycombinator.com/item?id=44763949
A4ET8a8uTh0_v2 · 3h ago
Well, the good news is: I think this finally gave me a good reason ( one she would accept that is ) to convince wife to drop FB from phone.. yay...
kjok · 3h ago
The kind of shady practices we have seen from this company, any self-respecting individual will be ashamed except Zuck. He has done more to rot the collective brain of a generation than any single figure in tech history.
The truth is, Meta isn’t building community, it’s building a surveillance hellscape where every click, glance, and pause is commodified. If you work there and still believe you're doing something good for the world, you're either delusional or willfully blind.
shortrounddev2 · 2h ago
There are hundreds of ways to secure a laptop and ensure your privacy. Why are there almost no good ways to use a smartphone in a secure and private way?
prmoustache · 1h ago
You can if you don't use a google certified rom, use primilarily a browser instead of apps and do not install the google play stuff.
fsflover · 1h ago
There's only one way to secure a laptop: use Qubes OS. It requires a lot of resources for the virtualization, and on the phone, it's not profitable for Apple and Google.
user94wjwuid · 3h ago
this benefits few and violates the privacy of millions… can we get a some fckin privacy laws yet
whalesalad · 2h ago
Is it 2012? We've known this forever.
SirMaster · 2h ago
How is the app accessing my photos on iOS when I have not given the app permission to access photos? Did they really find some exploit around this? Or is this photos permission really not the only way?
dns_snek · 1h ago
It doesn't sound like they're accessing your photos without the app being granted permission to do so in iOS. It sounds like they're abusing that permission (if granted) for nefarious purposes that users didn't agree to.
So you granted Facebook permission to access your files in order to share a photo in some group 3 months ago, but now they secretly abuse that permission to scan your entire library for AI training.
SirMaster · 59m ago
I guess if I grant an app access to all my photos, then I assume they can access them all whenever, unless I revoke that access after.
flanbiscuit · 2h ago
Same question for Android.
My guess is that this only affects people who have granted FB the permission already.
klabb3 · 2h ago
Why do apps request persistent access to camera roll at all? I don't want to manage a custom set of pictures. I want to send a picture now by selecting it.
Apps like Messenger, Telegram and WhatsApp refuse to show me the regular old photo picker. I have to enable "limited access" and select the same photos twice (first add to the set, then select for sharing). It's infuriating.
PS: The exception is media management apps, but those are extremely rare and irrelevant in the context of social media and communications apps.
jpl56 · 2h ago
1 : open the Facebook app.
Nope... I'm using a link to my Facebook homepage saved on the home screen.
toss1 · 1h ago
The big tech companies are now becoming archetypal evil — directly analogous with the ancient stories of 'deals with the devil'.
The devil cannot take your soul, but if he can get you to agree to a deal... well... good luck with that.
Here, the devil gets you to agree to some nice beneficial feature like "camera sharing suggestions ... for personalized creative ideas, like travel highlights and collages" or "cloud processing" for whatever benefit. AAaand you do, and there goes all your private photos. And the devil can rightly claim "but this is a mere contract dispute and the user agreed to all of this".
The ancient tales were supposed to be warnings, not How-To guides.
And of course now, these modern devils are just flipping the "Agree" button under the software all without your actual consent.
I do not let ANY Meta property or software run on any of my devices. If only everyone did the same.
I know that that’s partially implemented with the limited photo access now, but it’s confusing from a UI perspective and I don’t understand why this isn’t the default.
The only apps that need full access to my camera roll, are apps like Google Photos, Nextcloud or Immich. Everyone else can suck a lemon.
Absolutely not. Saving a photo does not need the full permissions. If an app does that, the developer is either ignorant or malicious. I see multiple apps that only have "Add Photos Only" permission including apps like Duolingo that.
Similarly the use case of allowing the user to pick one photo doesn't require any permissions at all. Just use the system photo picker. I post reviews with photos regularly on Google Maps and the Google Maps app doesn't have any photo permissions.
True, and this could maybe be solved by better app store review.
Every app submitted to the app store is reviewed by a human for approval. The reviewers could apply more scrutiny to photo permissions and reject apps whose permissions aren't justified.
Some apps like WeChat somehow insist on building on their photo picker and they get the copy/paste treatment.
The only feature request I have is to be able to scope app permissions to an album, since the current flow of selecting individual photos adds a lot of friction.
Yeah, that's the "limited access" mode but if the app uses the system photo picker[0], the app doesn't need any photos permission to pick a photo. Blame the app developers for not updating their apps (and this has been available since 2021 - they have no excuse.)
> Apps don’t need to request photo library permission when using either class, so the sample app avoids requesting permission until it’s necessary. A camera app, photo editing app, or library browsing app needs to use much more of PhotoKit‘s functionality, but [[an app that’s only setting a basic profile photo doesn’t need photo library permission]].
[0] https://developer.apple.com/documentation/photokit/selecting...
I click “add photo”, the system dialog opens, I select a photo, and then that gets sent to the app. Somehow, Apple managed to screw that up.
That’s exactly how it works for me in iOS at the moment.
In addition, I can see the list of photos each app has been granted access to in Settings > Privacy & Security > Photos.
It shouldn’t give access at all, but use a secure clipboard implementation so that only that app can read it out exactly once.
I agree about the clicks—the UX should be one-shot select and share with the permissions handled implicitly.
Imagine if every time you wanted to upload a file online, you first had to allow the one website to access that image first in one menu before you could select the image in the normal file upload menu. That's the UX they're complaining about.
Any UX other than this is something the app developer has implemented on top. iOS works exactly like you described.
So apps like Google Photos or other alternatives to the Apple made Photos app just shouldn't exist at all, if I understand you correctly?
So no it doesn't need permission to manage your local photos. Upload to Google and manage the photos on the cloud if you trust Google while increasing privacy for everyone else.
> I don’t understand why apps need access to my photos at all [...] There’s no need for apps to access the entire camera roll [...] The only apps that need full access to my camera roll, are apps like Google Photos, Nextcloud or Immich
Which still make me ask the question: They think no apps should access all photos, there is never any need for that, and these app currently do that and they need that, so are they saying those apps shouldn't exist at all?
“The only apps that need full access to my camera roll, are apps like Google Photos”
Obviously they don’t think the apps shouldn’t exist.
Apple actually has a great API for selecting a single photo in a privacy-respecting way which does not give the developer access to the library at all. [0] But oddly, there is no corresponding API for safely saving or updating a photo in the library. So if your app involves editing a photo, you can't use this API.
The only option you're left with is to request photo library access with that scary dialog.
If the user selects the limited access option, it's not just confusing—it's a prohibitively bad user experience. If the user snaps a new photo and wants to edit it in my app, they have to tap a "Select more photos" button in my app, find the photo in the picker, close the picker, and then select the photo again in my UI.
Personally, I evaluate full access on a developer-by-developer basis. Indie app developers are highly unlikely to nefariously scan your entire photo library, as they lack any incentive or motivation to do so. So I give apps like Darkroom or Halide full access.
Meta, on the other hand, has every incentive to scan my whole library, and I assume they would. So even though it makes posting to Instagram much more painful, I selected limited photo library access for Instagram.
Apple really needs to introduce a safe way for developers to access just the photos/videos users select, and then update those assets.
[0]: https://developer.apple.com/documentation/photosui/photospic...
> "WhatsApp" has been able to access your entire photo library for 6 months. Do you want to continue to allow full access?
Screenshots: https://macreports.com/app-has-been-able-to-access-your-enti...
It wouldn't put any pressure on Meta
there is already one, the enforcement point is what's missing
It won’t work for all use cases, but when it works it’s very practical. I’d love to see apps use that as the default - and request additional access only when the user’s current action actually requires it.
Yes it is friction but I simply do not trust the Zuck
Telegram refuses to work if you provide it with just 1 dummy contact.
Some other clingy apps also get pouty and demand full roll access each time you try to use a photo.
What's even worse: For years, Apple has also allowed many apps including Facebook/TikTok/Tinder to use the "iCloud Keychain" API to store invisible information that tracks you across app reinstalls and EVEN DEVICE RESETS, because it's stored in your iCloud account, and there's no way for you to see what is stored or manually delete it without going through FB/etc and no way to be sure that they are indeed deleting everything.
I've ranted about that a few times but people just shrug it off like wtf (I imagine other people who abuse these APIs want to keep it buried)
Now I'm not going to install any FB-related app on my new phone to test any other ways, because I'd rather not let them mark that device too if I can help it.
And yes, putting Messenger on my GrapheneOS phone is dumb, but my normal people friends all use Messenger, so that's where our group chats are. Best I can do is fail to convince them to install an XMPP client and join my self-hosted server, or minimize the impact of Messenger.
I uninstalled Facebook, Meta, MetaQuest, Instagram and deleted my accounts. I’ll never put one of their apps on my phone again.
Hope you also removed WhatsApp, a very popular chat app especially outside the USA.
"Facebook patent uses image recognition to scan your personal photos for brands" https://www.fastcompany.com/90333067/creepy-facebook-patent-...
"faulty pixels, lens scratches, other ‘camera artifacts’ and metadata within the image would be used to associate Facebook users with particular images. " https://www.imaging-resource.com/news/2015/09/18/facebook-wa...
Facebook mobile is a suboptimal experience, which is fine, it just reminds me to use it less.
[1] https://manualdousuario.net/en/a-less-affectionate-approach-...
Then I your post and now I realize I’m still in the Meta world. Forgot about whatsapp for a second.
They also go out of their way to make it hard to save a photo without granting full access. Creepy.
For example, when you receive an audio message, if you want to listen to it, it will request full media access. Android apps can access media files they have created, so this permission isn't needed. But without granting media access (or tricking it into thinking it has it, like with GrapheneOS' storage scopes), WhatsApp won't let you listen to the audio. Same when trying to open an image full screen instead of just the in-chat preview.
If this were a small developer, I could assume it was done that way accidentally or to cut some corners. Coming from Meta, I can only assume malice.
What pisses me off, though, is that I didn't find a way to give a contact a name without allowing it access to the phone's contacts.
But now Whatsapp retains access to all the photos I added unless I go into settings and revoke access to those photos. Creepy.
And yeah the contacts thing also pisses me off. They know what they are doing.
I think this is good enough. If you consider they do shady stuff with your pictures, you might as well consider that they hold on to anything they get their hands on right away.
Not really, given whatsapp could be theoretically keeping a local copy and the operating system can't really do anything about it. It would also be a pretty weird case to code. Imagine writing an app where if you tried to save a file, you couldn't immediately access it afterwards.
It works fine in other apps such as Signal and even Teams.
I don't really want Moxie or MSFT to have persistent access to any part of my personal photo album either, no matter how good they say they'll be.
Photos -> share photo -> whatsapp
Instead of starting from whatsapp
Having given it that permission, I can share photos from within Whatsapp as well, without going to the Photos app. I'm not sure if the file picker that pops up is a Whatsapp component (meaning the "Limited" permission is essentially unlimited) or if it's a system component. I mean the latter would make sense, but I'm too cynical to believe it works that well.
Every Galaxy I ever owned came with uninstallable facebook apps, despite paying over 1k for the phone.
On the last one I had, I went in and did the ritual deleting facebook, and going in the settings to disable their other background apps.
I checked the phone 8 months later, and found that they had installed even more facebook apps that were now running without my consent.
That was the end of those phones for me, and I'm amazed that I put up with it for so long.
You mean ununinstallable.
I’d highly recommend never granting any app full access to your photos.
One issue with permissions is that they apply to the entire app, including any third-party dependencies. Lots of apps use libraries given to them by advertising services -- they notoriously exploit permissions given to the app.
The solution is just straight up banning apps from the app store which request full photos permissions but only need a picker.
Whatsapp only needs a picker, it's not Google photos. Just make that part of the developer terms and start banning low hanging fruit and the apps will confirm in no time.
Immediately removed all permissions, insane to take a photo from my camera roll and do that. Imagine if it was some nsfw picture suddenly being integrated into my feed while scrolling in public or so..
Hope you don't use Microsoft or Apple products to manage the photos on your Camera.
Once we deleted the app, the RTB requests went away for good. I've had pihole previously, and she's had the Facebook app previously, and we never seemed to have this issue. Perhaps Facebook is drudging up whatever profits it can since it's mostly cornered the population, and is potentially in decline.
No comments yet
A web browser on the phone removes the need for a lot of "apps".
I wouldn't install work programs directly on my devices without some kind of sandboxing because of cases like this.
It's my strong opinion that the only methods you've seen to this point[3-7] were deliberately chosen to be ones that don't work, and make things worse in the long run.
It's my hope that things will change for the better, but when I think about what group could lead that change, there's No Such Agency.
[1] https://en.wikipedia.org/wiki/Capability-based_security
[2] https://en.wikipedia.org/wiki/Capability-based_operating_sys...
[3] https://en.wikipedia.org/wiki/User_Account_Control
[4] https://en.wikipedia.org/wiki/AppArmor
[5] https://en.wikipedia.org/wiki/Security-Enhanced_Linux
[6] https://en.wikipedia.org/wiki/Application_permissions
[7] https://en.wikipedia.org/wiki/Trusted_Platform_Module
When a corporate does shady shit the last thing you'd do is trust the tools they provide to limit that. That's just insane.
>"People just submitted it. I don't know why. They 'trust me'. Dumb fucks." -Mark Zuckerberg
Zuckerberg: Just ask
Zuckerberg: I have over 4,000 emails, pictures, addresses, SNS
[Redacted Friend's Name]: What? How'd you manage that one?
Zuckerberg: People just submitted it.
Zuckerberg: I don't know why.
Zuckerberg: They "trust me"
Zuckerberg: Dumb fucks
Instant messages sent by Zuckerberg during Facebook's early days, reported by Business Insider (May 13, 2010)
The truth is, Meta isn’t building community, it’s building a surveillance hellscape where every click, glance, and pause is commodified. If you work there and still believe you're doing something good for the world, you're either delusional or willfully blind.
So you granted Facebook permission to access your files in order to share a photo in some group 3 months ago, but now they secretly abuse that permission to scan your entire library for AI training.
My guess is that this only affects people who have granted FB the permission already.
Apps like Messenger, Telegram and WhatsApp refuse to show me the regular old photo picker. I have to enable "limited access" and select the same photos twice (first add to the set, then select for sharing). It's infuriating.
PS: The exception is media management apps, but those are extremely rare and irrelevant in the context of social media and communications apps.
Nope... I'm using a link to my Facebook homepage saved on the home screen.
The devil cannot take your soul, but if he can get you to agree to a deal... well... good luck with that.
Here, the devil gets you to agree to some nice beneficial feature like "camera sharing suggestions ... for personalized creative ideas, like travel highlights and collages" or "cloud processing" for whatever benefit. AAaand you do, and there goes all your private photos. And the devil can rightly claim "but this is a mere contract dispute and the user agreed to all of this".
The ancient tales were supposed to be warnings, not How-To guides.
And of course now, these modern devils are just flipping the "Agree" button under the software all without your actual consent.
I do not let ANY Meta property or software run on any of my devices. If only everyone did the same.