Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

I want to start to use goodreads.com with my Google account but when I start to sign in with my Google account I get prompted that goodreads.com will get access to my Google contacts. This worried me a little.

Does anyone know why they want access to this information or how they use it?

Please note I have contacted them, but they have not gotten back to me.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

The reason that Goodreads or any 3rd-party service asks for access to your address book is to find other friends/contacts that use the same service.

Using basic authentication, people would just provide their username and password to the service (say their Gmail account) and the service would read the address book. This is a highly insecure practice and is teaching people to be phished.

The new method that Goodreads is using is OAuth or OAuth 2.0 which provide granular access to your accounts via a token, and allows access to be revoked. In theory this is better, in practice a nefarious user can get that password in a hundred ways.

Once Goodreads has access to your contact info, you have to trust them that they won't do anything dodgy with it, like spam your entire address book (Plaxo, I'm looking at you!). If you're not comfortable with this, don't grant access to them.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.