Privacy?
htims:
Hi,
What info does Obihai have access to when using the OBI200 solely for google voice calling (2 lines)?
Also I read that Obihai could/can have access to my device, is there a way to prevent that while keeping the unit operational (assuming this is true)?
Thanks
SteveInWA:
OBi devices, and Obihai, Inc, do not have, nor store, your Google password.
During Google Voice setup on an OBi, the OBiTALK web portal has you log into your desired Google account (the one that holds your Google Voice number). It then shows you a pop-up window, confirming you are logged into the right Google account, and asks your permission for the OBi to access only the Google Chat/XMPP service on your Google account, and nothing else. Then, it uses Google's OAUTH authentication method to exchange secure tokens with your device. Only that encrypted token is stored, not your password.
Don't worry about it.
htims:
Ok thanks. I noticed the OAth authentication so that was good.
Is it true obihai can/does have access to the device?
SteveInWA:
Yes, but only for limited purposes (e.g. for setup of Google Voice, for remote firmware updates, and to help customers diagnose problems), and there has never been a report of a security incident or breach as a result. Obihai is a small company of engineers, with no interest in selling or otherwise using your personal information.
GPz1100:
This is what I see when I log into my google account/connected apps and devices.
Google hangouts access I can understand, but the email address and basic profile info.
From further research it appears basic profile info potentially includes the following: user's ID, name, photo, URL, country, language, timezone, and birthdate.
If you're curious what your profile shows, try this link https://developers.google.com/+/web/people/ . Scroll down to the 'try it' button and click. Sign in to the google account, then it'll show you what your profile looks like.
From the link above it looks like the following info: Nickname, gender, email addr, display name, family name (last name?), photo (if set). That's a lot of information.
Now, in comparison, refresh token access for google voice access in a pbx reveals only the hangouts permission.
http://www.obihai.com/legal statement reads like most others. These days we get so much spam and junk in email that it's truly hard to determine where it originated from. For what it's worth, the obi box was set up with a brand new gmail address. We haven't received any spam (or any email for that matter) in that account since its creation. Perhaps what is bothersome is the request for this info. Why need it for internal purposes if it's not going anywhere beyond the company....
Navigation
[0] Message Index
[#] Next page