Privacy concern: displaying emails
We got this feedback from a user today: "I've just noticed that when I click on anyone's name, their email address pops up. I'm not happy about this, as it's bad from a privacy point of view. I don't want my email address visible to anyone who looks.
Please at least give us the option to hide our email addresses in the settings."
Personally I agree that this is a valid privacy concern. However, there is a pragmatic reasoning behind displaying emails: it's useful a) when you want to direct-message someone, and b) when you want to invite an existing user to a new group.
I imagine this won't be an issue in the future: case a) will be fixed when we have an internal messaging system in place and case b) will be fixed when we implement Trello-style usernames.
What should we do in the meantime to patch the privacy hole without creating a UX regression? Is the user's suggestion (add a 'hide email' setting) workable?
Jon Lemmon Sun 14 Oct 2012 8:24PM
It's only visible to people within the group. Communicating this clearly is probably the best first step. Then also providing a "hide email address" option.
Aaron Thornton Sun 14 Oct 2012 8:48PM
Great point Jon. That would make me feel more comfortable.
Benjamin Knight Sun 14 Oct 2012 10:01PM
Agreed on both points Mr Lemmon, I think that sounds like some really sensible first steps.
Jon Lemmon Mon 15 Oct 2012 6:23AM
I'm thinking for now we just be clear that the email is only displayed to group members.
@Richard - would you be interested in mocking this up or just adding it to the app? It'd just be something in the popup like "(Email is only viewable to members of this group)"
Richard D. Bartlett Tue 16 Oct 2012 9:58PM
Follow up from the user concerned: "...If it's only group members who can see email addresses, that's no so bad for the time being, but if the email addresses can be hidden once you've got your private message system working, that would be great, and an option in the settings 'allow users to send me private messages [or 'emails', as it is currently]' would be great, to give us the choice whether people can contact us directly."
Matthew Bartlett Wed 17 Oct 2012 10:37PM
@RDB, do we really want to add private messaging? Feels to me like Yet Another Inbox. I'm assuming your talking asynchronous — not chat (which I'm all in favour of).
Richard D. Bartlett Wed 17 Oct 2012 10:43PM
Asynchronous vs. instant messaging is an interesting question in light of e.g. Facebook and Yammer integrating their chat and mail into one box with two interfaces.
I'm not hearing an immediate need for Loomio to implement either, to be honest.
Benjamin Knight Wed 17 Oct 2012 11:48PM
I think @mentions will do heaps to relieve any need for a private messaging system, at least in the intermediate term
Danyl Strype Tue 23 Oct 2012 2:39AM
Please don't create a private inbox in Loomio. We use an email address to subscribe to Loomio in the first place. For most users, that's all the inbox they'll ever need. However, a private messaging system that allows me to email another Loomio user without ever knowing their email address (until they decide to give it to me) would be great, and would deal to the privacy issue your concerned user raised.
I do think realtime chat would be useful to users of Loomio. For example, Loomio with chat (text and voice) would replace everything the TimeBankers have been using Skype for. I suggest instead of writing it from scratch, you find some existing RoR chat code which implements open standards (eg XMPP/ Jabber, IRC, Mumble/Murmur), and plug it in as an optional module.
Aaron Thornton · Sun 14 Oct 2012 2:00AM
we could give the user an option to hide email adress on their user settings. Easy enough to implement as a plug until we get the new feature set finished