Greetings again,
As the most popular thread related to PhoneMyPC, I wanted to take a moment to talk about the permissions PhoneMyPC now requests, and our licensing scheme.
The goal of licensing is to protect our server resources for the customers who pay for them. At worst, there have been times when about 1/2 of the users of our servers were using unpaid copies of the software. An additional goal is to tie the ownership of premium features (if and when we release any, such as the ability to manage 100's or 1000's of PC's, for IT people) to some identity so that is is portable.
The way this will work, once implemented, is each purchaser will receive a key via email. It is a simple string of characters. You put the key into the software on your phone, then forget about it. Even if you factory reset your phone, you never need to enter the key again--you still get updates, and you still have access to any premium content you have purchased.
The only time you need to use your key again is if and when you switch to a new phone or device, in which case you can enter your key and go; no hassles, no need to talk to us or re-purchase the software. Our servers will note that the key is no longer valid on the old device, and that it is valid on the new device.
We are trying to make sure you get what you pay for, and that you never have to pay a second time.
Now, to do this, we need to gather certain data from the phone so we can identify it. Specifically:
* IMEI or other carrier-provided ID, if present
* Phone number, if present
* Android unique ID, if present
We use a combination of these to identify the device.
However--and this is the key--these bits of data never leave your phone in their original form. We hash them so that they remain highly unique, but we never see the real data on our servers.
There are often discussions about apps that mine data on our phones, and my response is always that developers should take responsibility for being transparent about what they collect and what they do with it. This post is just a start on that mission for us, because this forum has more of our users than anyplace else.
So, we read the three IDs mentioned above, hash them (in an irreversible way), and use them to identify your phone. We do not read phone call or any other data.
We take privacy very seriously--and by that we do not mean "we want your data, and we will protect it," but rather we mean "we just do not want your data."