What kind of user consent is necessary for Firebase phone authentication? - firebase

The firebase phone auth documentation states:
Phone numbers that end users provide for authentication will be sent
and stored by Google to improve our spam and abuse prevention across
Google services, including but not limited to Firebase. Developers
should ensure they have appropriate end-user consent prior to using the
Firebase Authentication phone number sign-in service.
I believe I will have to display some sort of disclosure when asking for a user's phone number, but I'm not really sure what it should say. Can anyone provide an example? I used Digits/Fabric at one point, and it had a bunch of links to various privacy policies and ToS on the phone number collection screen, but now that they've joined with Firebase I'm kind of confused about what's necessary.
Thank you!

firebaser here
FirebaseUI-web displays the following before sending the SMS:
By tapping Verify, an SMS may be sent. Message & data rates may apply."
On the screen where the user enters the confirmation number, it displays:
By tapping Continue you are indicating that you agree to the Terms of Service
With the tos link being one that you as the developer provide. The reason it leaves the exact content open to you is that it partially depends on the jurisdiction that your app is under.
All we can do is tell you what we use the phone number for:
Phone numbers provided for authentication will be sent
and stored by Google to improve our spam and abuse prevention across
Google services, including but not limited to Firebase.

Related

Are "user" bots made with telethon allowed on Telegram?

I'm trying to make a bot for telegram using the telethon library. I would like my bot to be able to retrieve all members of any group that it's been added to which is not currently possible with the telegram bot API.
Because of this limitation, I made a new telegram account/app for my bot (using a Google Voice number) to use the python telegram Client, telethon, to gain user level access to the telegram API.
After playing around with it for a bit, I received this error:
telethon.errors.rpcerrorlist.PhoneNumberBannedError: The used phone number has been banned from Telegram and cannot be used anymore. Maybe check https://www.telegram.org/faq_spam (caused by SendCodeRequest)
After trying to login again from my phone I received a similar notification:
This phone number is banned.
I submitted a support ticket which was never responded to, but I was somehow able to login again with the Google Voice number the next day.
My question is: are we allowed to make bots for telegram with user level permissions using the telethon client? I cannot find any explicit rules about this in the telegram API ToS. However, the telethon docs mention in passing:
If your application ever needs user features because bots cannot do certain things, you will be able to easily login as a user and even keep your bot without having to learn a new library.
You're allowed to use any userbots. the ban probability is exact same as of an unofficial app of Telegram in Google play and other platform.
You're however going to be suspected and pre-banned by Telegram if you're from certain countries or you use VOIP phone numbers. Telegram doesn't like such numbers and might require you appeal to unban it manually.
It's fully their decision.
i, have been using my account in forks and userbots, etc.. for many years, so new accounts are suspected to be up to no good and frozen. try with your own number or buy extra legit one.
Telegram is pretty spammy platform and lately they have increased the ban situation.

Avoid duplicate accounts in Firebase (email and phone)

I have an Firebase application that allow user to sign in with google account, or sign in by phone.
Assume user signed with Google.
In the next sigining, it tried sign with phone (A number that connected to its account),
I can't indicate that it is the same user. I think it is a new user.
But Google has the information that it is same account.
Is there a way I can know it?
(Google people API is not a good option.
Because it give me only the phone user has entered here: https://myaccount.google.com/profile
That it is not in wide use.
And it is not give me the recovery phone number)
I don't have to know the number of each user.
Only to know if phone X is connected to user Y.

What is the best practice to provide a test account for Google SignIn in Google Play Console?

I have an Android app that uses Google SignIn as a sign-in method.
In the Google Play Console, I'm supposed to provide a test account for Google to conduct app reviews. However, I'm facing an issue with that.
Even though I provide a Google account to test, as you can see in the below screenshot, there's an Identification Verification step that blocks Google reviewers to proceed with their job.
From my understanding, this step appears when Google suspects a sign-in. Although this test account is created/used in Japan, Google reviewers use it in other countries e.g. India (most of the time), the US, etc, that would be why this sign-in is considered as suspicious.
Then here's a question. What can I do about this situation? Just for your references, I already tried the following but nothing helped.
Disable 2FA (i.e. No additional authentication is configured)
Sign out from the test account in all of my devices (IIRC, with this approach, previously Google reviewers succeeded in sign-in without the Identification Verification step, but seems not this time)
Google reviewers or even their support team will never help me with this so it'd really be appreciated it if you know the workaround. Thanks.

Getting r_fullprofile access to the Linkedin API

I am currently using a linkedin API with r_lightprofile in my application.
Two months ago, I sent a request for access to r_fullprofile using the Partner Program form.
https://business.linkedin.com/marketing-solutions/contact-us
http://prntscr.com/opfnpd
I also sent a request to the Marketing Developer Platform, but the request is still pending (http://prntscr.com/opfvfx)
After all this, I got an email with a form to fill out information about the company.
But after filling out the form, I did not receive an answer that the company is suitable or not suitable for full access.
1) How long does it usually take to get access?
2) Does the linkedin API have support? Email, Live chat or something else?
3) Have I done everything for access? Maybe I missed something?
4) Does Linkedin send an email in case of failure?
It's been a long way for me too, I'll give you some random tips:
Make sure your app is connected to a LinkedIn company page and that the status is Verified. To do this, from the app dashboard, add to the Team members an administrator of the LinkedIn company page (as Admin member) and let him access the app dashboard. He should be able to see a Verify button to confirm the authenticity of the app.
The only support that was really helpful to me was Zendesk.

How to create automatic phone call with authentication code

We are to assign a four-digit authentication code to our web users by calling their listed phone number.
It is pretty much like the service of Google Map for business. In their service, if a web user wanted to claim the ownership of a listed store, the user can request a call to the published phone number for that business and obtain the authentication code. With that code correctly entered, Google Map confirms that user account is the owner of that business.
But how did you make it? Can anyone give me some insight?
Twilio Cloud Communications – APIs for Voice, VoIP and Text Messaging
How about this service?

Resources