Oh dear. SwiftKey – the Android and iOS virtual keyboard bought by Microsoft earlier this year for a cool $250 million – has suspended a key component of the app after it was found to be leaking other users’ private data.
According to The Telegraph, multiple SwiftKey users have found other people’s phone numbers and email addresses in their suggestions. One Reddit user reported seeing German-language suggestions on a freshly-rooted Samsung Galaxy S6 with the UK English pack installed, as well as someone else’s email address.
Ever been to a tech festival?
TNW Conference won best European Event 2016 for our festival vibe. See what's in store for 2017.
SwiftKey believes this error is due to a bug in the keyboard’s synchronization feature, which used to keep user data updated between disparate devices. In response, it has deactivated this feature while it remedies the problem.
Installed #Swiftkey beta. Still can't sync.
— Brunul (@brunul) July 28, 2016
Apparently Swiftkey hasn't been able to sync data for a couple days now and I can't import the data from my old phone to the new one
— Regike (@Regike_) July 28, 2016
I hate when SwiftKey has the wrong suggestions for me because it won’t sync my account
— CoolStar (@coolstarorg) July 28, 2016
We’ve reached out to SwiftKey for comment, and to see when Sync will be restored. We’ll update this post if we hear back.
Update: SwiftKey has issued a statement.
“This week, a few of our customers noticed unexpected predictions where unfamiliar terms, and in some rare cases emails, appeared when using their mobile phone. We are working quickly to resolve this inconvenience.
While this did not pose a security issue for our customers, we have turned off the cloud sync service and are updating our applications to remove email address predictions. During this time, it will not be possible to back up your SwiftKey language model.
The vast majority of SwiftKey users are not affected by this issue. If you have any reason to believe you are seeing unfamiliar predictions, please contact firstname.lastname@example.org.”