Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by ilikehurdles on Thursday March 26, 2020 @04:08PM (#22697399)

Zoom has allegedly HIPAA-compliant BAAs with users in the health space. If any PHI data is making it over to Facebook without a similar agreement from Facebook, Zoom is in for some trouble.

[ Parent | on HN ]

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by spitfire on Thursday March 26, 2020 @05:20PM (#22698103)

IP address, telephone number, city and other identifying information is ALL considered PII.

I work with (adjacent industry) HIPAA protected data, which is considered PII by virtue of knowing Bob Smith is in the system. If they're under a BAA and sending that information to Facebook they're in violation.

If one of my sub-processors did this my lawyer would be livid. But hey, it's Silicon Valley, don't harsh their buzz man.

[ Parent | on HN ]

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by sizzle on Thursday March 26, 2020 @06:49PM (#22698797)

How do you even report something this technical to non technical folks who oversee HIPAA? Would you have to do a case study style write up?

[ Parent | on HN ]

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by type0 on Friday March 27, 2020 @06:37AM (#22701732)

As if it's binary definition - technical and non technical, unless they're amish I don't see why it can't be reported in plain terms

[ Parent | on HN ]

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by dmooney1 on Friday March 27, 2020 @06:25AM (#22701669)

There are plenty of technical people overseeing HIPAA.

[ Parent | on HN ]

Re:Zoom iOS app sends data to Facebook even if you don’t hav... by Ididntdothis on Thursday March 26, 2020 @08:58PM (#22699567)

I am working on adding a Zoom client to a medical device right now :)

[ Parent | on HN ]