Comment on Period tracking app refuses to disclose data to American authorities

sabreW4K3@lazysoci.al ⁨2⁩ ⁨months⁩ ago

• bobs_monkey@lemm.ee ⁨2⁩ ⁨months⁩ ago

  Or they could just store the data locally on the user’s device and not transmit it back to a central server, such that the company never even has possession of the data nor any way to retrieve it?

  source

  • pbjamm@beehaw.org ⁨2⁩ ⁨months⁩ ago

    concerns anti-abortion state laws could allow phone searches for menstrual data

    If the police search your phone then that would not protect you.

    source
• Flax_vert@feddit.uk ⁨2⁩ ⁨months⁩ ago

  Probably a form of e2ee

  source

  • renard_roux@beehaw.org ⁨2⁩ ⁨months⁩ ago

    That requires that you trust the app vendor not to have some sort of back door, no?

    source

    • bamboo@lemm.ee ⁨2⁩ ⁨months⁩ ago

      Not necessarily. If you trust the code running on your device then there is no backdoor they could install on a server that would break e2ee. They would have to backdoor the client where the keys are.

      source
    • Flax_vert@feddit.uk ⁨2⁩ ⁨months⁩ ago

      True, unless it’s open source and maybe self hosted

      source