question about "device not visible for other apps"

[morty303]

Hello,
in the Fossify Contacts app, I have deactivated the first checkbox for public storage ( with 0 contacts) and activated the second checkbox, "Device not visible for other apps."
I just noticed that the app called "Open in WhatsApp" from Fdroid still has access to all my hidden contacts.
Is this a bug or intentional?

greetings

[Aga-C]

Phone storage (not visible by other apps) means that apps that have direct access to contacts won't see what's stored there.

In case of the app "Open in WhatsApp", it doesn't have direct access to contacts. It just opens your default contacts app for you to choose a contact.

[morty303]

Phone storage (not visible by other apps) means that apps that have direct access to contacts won't see what's stored there.

In case of the app "Open in WhatsApp", it doesn't have direct access to contacts. It just opens your default contacts app for you to choose a contact.

My default contact app is empty. I have cleared the contact storage. I have only contacts in Fossify which are hidden. The App " Open in Whatsapp" has access to it. No joke.

[morty303]

@Aga-C : if you have time, please check why "Open in Whatsapp" has access to "not visible" contacts.
You don't need to rush, but please check whether it is a security vulnerability. ;)

[Aga-C]

As I wrote in my previous comment, "Open in WhatsApp" doesn't have direct access to contacts. It just opens your default contacts app for you to choose a contact. Fossify Contacts doesn't limit visibility in such case.

[morty303]

As I wrote in my previous comment, "Open in WhatsApp" doesn't have direct access to contacts. It just opens your default contacts app for you to choose a contact. Fossify Contacts doesn't limit visibility in such case.

@Aga-C :
My default contact app from Lineage OS has 0 contacts. I only imported my contacts into Fossify contact app and checked the checkbox for unvisible.
If I e.g. activate the authorization for contacts for Telegram, then Telegram accesses my default lineage os contact app and sees 0 contacts. Telegram does not see my contacts in the Fossify Contact App.
The "Open in WhatsApp" app would only have to see 0 contacts of the Default Lineage OS app. but does not do it. "Open in Whatsapp" accesses the contacts of the Fossify Contact app.

[naveensingh]

I believe you are misunderstanding the app's behavior.

"Open in WhatsApp" is not "accessing" those contacts. When you press "Pick from contacts", it just launches a contact app for selection, and if you select Fossify Contacts, you'll see your contacts in Fossify (even if they are private).

This is not a bug. If you still believe it is, create a bug report with proper screen recording and exact reproduction steps.

Locking this thread now.