Clubhouse is the latest social-media “crush.” It provides what I call “audio chatrooms.” Others call it “drop-in audio” or “social audio.”
My intent in this article isn't to tell you how to use it or refute the ridiculous claims that it will kill podcasting (but that just made my opinion obvious).
Instead, I want to warn you and plead with you to not to give the app access to your contacts.
Currently, joining Clubhouse is by invitation only. The experience is available on only iOS (designed for only iPhone; the app isn't optimized for iPad screens).
Clubhouse does not allow you to invite anyone directly, such as by entering an email or phone number, or getting an invitation link. The only way you can invite someone is if they (and their correct information) are in your contacts, and then you must allow Clubhouse to access your contacts.
This seems to be a big problem!
It even affected how I joined Clubhouse. A friend invited me, but sent the invitation to the phone number he has saved in his contacts—not the phone number I used when signing up for Clubhouse. Thus, Clubhouse now has a phone number I never wanted them to have. And the Clubhouse team couldn't (or wouldn't) correct the phone number mixup in their system, so I had to go through with setting up the wrong account in order to invite the right account.
That's a frustrating and seemingly poorly designed system. But my biggest concern is what's happening behind the scenes that could be violating the privacy of everyone in your contact list—without their consent!
Granting Clubhouse access to your contacts is the only way to invite someone. But even though you can later go into the iOS settings to revoke further access to your contacts, Clubhouse appears to save their own copy of all your contacts and their personal data on the Clubhouse servers! This is evidenced by my continuing to receive notifications about acquaintances who join clubhouse even though the only connection I have with them is through my contacts list (like an accountant I recently called)! We have no mutual friends, follow none of the same people, and have none of the same interests. I think the only way Clubhouse would know to tell me about their joining is by saving a copy of that other person's personal data from my contact list and associating that other person with my account.
This happens even for people who have only applied to join Clubhouse, but have not yet been invited and thus haven't shared their own contacts, yet.
And yes, this is all after I revoked access to my contacts. So they must be getting the information from my contact list stored on their servers.
This seems to indicate they have collected personal data about people without the consent of those people.
There's no way for me to delete my contacts from Clubhouse's servers, and my multiple emails requesting they delete my contacts have been ignored.
I've also asked what they're doing with my contacts and they have ignored those questions even in emails they were already responding to, but apparently ignoring that question.
This seems highly concerning!
I urge you to not hand over your contact list to Clubhouse! This would seem to compromise the personal privacy of everyone on your contact list! (Some of your contacts could be under the protection of GDPR, CCPA, or other local privacy laws.)
I realize that until Clubhouse allows you to invite someone directly (by phone number, email, or shareable link), this means you would not be able to invite anyone.
But isn't respecting your friends' rights to their own privacy more important?
Clubhouse team, if you're reading this, I urge you to fully disclose what you're doing with our contacts, honor requests to delete our contacts from your servers, and allow us to invite people without giving you access to all our contacts. Or if you're not keeping our contacts, then it would help to explain how you're matching users.