Help with KDE PIM and Google Privacy Policies needed

[Nicolás Alvarez]

El vie., 6 de mar. de 2020 a la(s) 03:41, Martin Flöser
(mgraesslin at kde.org) escribió:
>
> Am 2020-03-05 21:19, schrieb Daniel Vrátil:
> > Hi all,
>
> > I would appreciate any hints and pointers at where exactly the KDE PIM
> > Privacy
> > Policy might be in violation of the requirements from Google. I may
> > have been
> > looking into those documents for so long I can no longer see anything
> > :/

It sounds as if Google didn't understand the actual meaning of any of
the 3 items they quote (eg. when we tell users to look at the privacy
policy of third-party services, *Google* is the third-party service in
question).

> Reading [0] I see "Your use of data obtained via the Restricted Scopes
> must comply with these requirements:" ... "Only transfer the data to
> others if necessary to provide or improve user-facing features that are
> prominent in the requesting application's user interface"
>
> And reading the screenshot I think that's the problem. We state in our
> privacy policy about 3rd party plugins and Akonadi. Especially Akonadi
> is a "transfer of data to others" and that allows all applications to
> access the data. If KWin accesses the data it would be in violation of
> the additional requirements of the requested scope.

If I add my Google account to KDE PIM, it will sync my email and
calendar events with Akonadi. Third-party apps can then access my
email and calendar events via Akonadi.
If I add my Google account to iPhone, it will sync my calendar events
with the system calendar database. Third-party apps can then access my
calendar events via EventKit.
If I add my Google account to Mozilla Thunderbird, it will sync my
email with its database. Third-party addons running inside Thunderbird
can then access email content.

Apple can give its million appstore apps access to Google calendar
data, and Mozilla can let addons access email data, but we can't? What
do they do differently?

Also, Linux desktop systems are usually not sandboxed. If we didn't
have Akonadi, and KOrganizer/KMail/etc used their own databases to
store data without intending to share them with other apps, other apps
could *still* access the data via the filesystem. Mozilla Thunderbird
is approved by Google, and KWin theoretically *could* access my email
because it can read ~/.mozilla. Sure, in practice it doesn't; but in
practice it also doesn't access Akonadi.

-- 
Nicolás