> I have WhatsApp to talk to some family and I recently disabled allowing all contacts in iOS 18. WhatsApp now has a persistent notification at the top of messages to "Allow All Contacts".
If this is still possible, then Apple fucked up the implementation of this feature, as clearly there should be no way to differentiate not having bothered to fill out a ton of contacts and having limited access for an app to see your contacts; and since this is so obviously easy to do correctly, it frankly sounds actively malicious: there is a set -- probably a very small set -- of engineers and product managers who chose to build this incorrectly, in order to continue to maintain the status quo of the proxy war between Apple and Meta, to our detriment.
edit: but that’s intended to be used specifically to respond to a contact search. I don’t use WhatsApp, but a “persistent notification” sounds unrelated to ContactAccessButton.
No? For this particular case if the api exposed a bunch of bogus contacts then the WhatsApp app would be displaying and autocompleting non-existent contacts to the user throughout the UI, which would be a horrible UX.
There are cases where you can fake data and cases where you need to be able to block access and the apps should respect that.
> If this is still possible, then Apple fucked up the implementation of this feature, as clearly there should be no way to differentiate not having bothered to fill out a ton of contacts and having limited access for an app to see your contacts
If you only allow a subset of your contact, WhatsApp proceeds to not display contact information for everyone and to disable the whole status feature.
My assumption was that WhatsApp was heuristically detecting the lack of full contacts access. I figured they looked at the number of contacts to down from a couple hundred (pre-iOS 18) to 5, and assumed I limited access. However, it could totally be a detectable API response to the app as well.
If this is still possible, then Apple fucked up the implementation of this feature, as clearly there should be no way to differentiate not having bothered to fill out a ton of contacts and having limited access for an app to see your contacts; and since this is so obviously easy to do correctly, it frankly sounds actively malicious: there is a set -- probably a very small set -- of engineers and product managers who chose to build this incorrectly, in order to continue to maintain the status quo of the proxy war between Apple and Meta, to our detriment.