Path, the popular social network that competes with the likes of Instagram, may be uploading your iPhone’s entire address book up to its servers. Arun Thampi from mclov.in noticed the Path app’s steal data dump while trying to create a Mac OS X application for the social network during a hackathon. “Upon inspecting closer, I noticed that my entire address book including full names, emails and phone numbers was being sent as a plist to Path,” Thampi said, noting that Path didn’t ever ask for permission to do so. It’s unclear why Path is uploading the iPhone’s entire address book, but Thampi noticed that the social network performs the action during an API call with basic HTTP authentication. It remains unclear if Path’s Android application is also guilty of uploading personal information. Thampi has instructions on how to catch Path in the action on his blog.

via Popular Path app revealed to secretly upload all iPhone contacts to its servers [updated].