Lets say I have a couple of friends who I have in my address book and of course they saved me in theirs. There might be the obvious information about me like my phone number and my email address but maybe even more, like my sex, birthday, second email address, work address, private address and so on, depending on how organized my friends are.
When one of my friends installs an app on his/her mobile phone that has permissions to read their contacts, that app (like Facebook/Whatsapp or Google/Apple itself) will most probably grab all the information it can get, upload it to their servers and might match it to other information. At least I have no way of controlling it.
Now some company has all the information about me (which I carefully protected) perfectly arranged and preformatted by my friend or collegue, without my consent. The person installing the app of course signed away their privacy rights but not mine!
So my question is: Who is responsible for this unauthorized exchange of my personal data [Update] in Germany? [/Update]
Do I have to sue my friend/collegue for adding me to their address book and giving it away so easily or is the company that grabs information to be held responsible?
I asked the same question on the Android forum but it was called off topic. I hope it's ok to ask the same question again here.