Hacker News Reader

AFAIK the issue is that the service is pulling in PI of other people without their consent.

You can not store my name/phone number etc without my consent - even if you got that data from one of your user's contact list.

Please correct me if I'm wrong. IANAL.

I believe the "We need contacts permission" message is key here. The message should include the purpose for what the contact data will be used for when asking for consent.

> Specific – consent must relate to specific actions relating to the data rather than for any purpose the business wants it. For example, if the data is for a newsletter subscription, it must say exactly that.

https://www.gdpreu.org/the-regulation/key-concepts/consent/

If my number is in your phonebook, you cannot give consent to Clubhouse to get that info on my behalf.