Archive — US — techcrunch
Event startup Partiful wasn’t stripping GPS locations from user-uploaded photos
Partiful, a social event planning app, was found to be exposing GPS location data from user-uploaded photos, raising privacy concerns. Despite its popularity and acclaim, users criticized the company's data practices, especially since some founders worked for Palantir. Following a report by TechCrunch, Partiful fixed the vulnerability but continues to investigate potential data breaches.
Key points
- Partiful is a popular social event planning app that replaced Facebook in sending party invitations.
- Users reported concerns about privacy due to the founders' connection with Palantir, a controversial data mining company.
- TechCrunch discovered that Partiful was not stripping GPS location data from uploaded images, allowing raw image access and possible identification of users' locations.
- The security flaw was confirmed through user tests and indicated that metadata containing sensitive information, such as exact GPS coordinates, was not removed upon upload.
- Partiful responded to the issue swiftly, fixing the vulnerability within a day but is still investigating data access.
Why it matters
- The incident reflects broader concerns about digital privacy as tech companies collect and store vast amounts of user data.
- Growing scrutiny on user data practices is common among popular social platforms, especially those with ties to controversial organizations.
- In 2025, privacy and data security trends are critical in the tech industry, shaped partly by the rise of apps like Partiful and increasing user awareness.
Partiful's data security oversight underscores the importance of user privacy in technology, especially as apps gain widespread adoption. Although rectified swiftly, this incident highlights ongoing challenges in managing and securing user data effectively.