needs to be challenged by real lawyers (one person downloading the app) that should replicate a use case when the person on the contact list will get his own data by the application without the first person (that downloaded the app) giving consent for the contact list
@ACLU