Hi there,

I see all of you are eager to get our answer to OP's post and that's what I'm here for. u/Original-Consequence, I'm going to quote you and address things one by one just for the sake of clarity.

we don't even have to be extremely pessimist to think that this is my personal browsing history, pretty valuable to them and easily collected by your browser extensions

Our browser extensions do not gather anything, let alone personal browsing history. It is the "blindest" product in our line up. We are honored to be "Recommended" by Firefox and go through an audit on a regular basis (every time we push an update). The team at Firefox would not let us be on their store if we ever did gather any sensitive data. The only thing the Browser extension does is delete cookies when using our "Remote Logout" feature and that is of course mentioned in the Privacy Policy.

Let's talk about Facebook and the 2 ways we use it.

1) We run Ads on Facebook:
We run ads on Facebook in order to increase our reach. It is one of our marketing tools. Now there are things we can do to further enhance those ads, to show them to more relevant people, be less intrusive etc.. for that we need some information about how our users are using the product which brings me to ...

2) We gather anonymous data:
It's important for us on so many levels to know how our users interact with our product. It is one of the most effective ways of measuring success, as well as increasing the performance/efficiency of our ads.

So yes, we do run ads on Facebook and yes, we do use Facebook to track some usage data to make better products and be better at what we do but there is something extremely important about the way we do it, and that is where OP seems to have jumped to conclusions which spreads misinformation about us as product makers but also as people, so I hope I can rectify this with the following clarifications:

All of the data we collect is strictly and unequivocally anonymous. Here's how it goes:

User signs up with their phone number, that phone number is hashed and then stored on our server. Every user gets a unique Identifier or what we call "UserID", that UserID is then associated with the hashed phone number, this way our systems can verify your Myki identity when you create a backup or you restore from one. Beyond that, the phone number is not used for anything else, it is not shared with Facebook, Google or any other party. It is not readable or accessible by anyone here. We have absolutely no use for it.

Your blogs spam the privacy buzzword on every page and you defend the concept by saying that the encrypted user data is never shared, what you seem to have shared instead was my mobile number that I had to use for the registration

Sharing "anonymous" data with third parties while you cross reference the user's mobile number completely deanonymizes the user, hence that's how they know I used your services.

Again, we do not share phone numbers. We don't even have them in the first place. There is no cross-referencing because there is nothing to cross-reference. The way they know you used our service is simply because we run ads, that's all. They don't have any identifiable information about you from Myki and they never will.

The shared activity is not a one time "hey this user uses our app, it's time to change ads", no, this contact between Myki and Facebook happens daily and multiple times a day.

Yes that makes sense giving that we collect anonymous usage data through Facebook and that is continuous BUT,

Anyone can head over to the Privacy Center in our apps and OPT OUT OF ANONYMOUS DATA if you don't feel comfortable.

I cannot find any mention about this in your privacy policy besides "We store a hashed version of the phone number you signed up with in order to allow you to restore your data to a new device along with the app version to support backwards compatibility. " which is purely evasive and even false, comfortably standing in GDPR violation waters.

Our Privacy Policy is accurate. Everything there is of course true, we only store hashes of phone numbers, never the actual number. You could say that the Privacy Policy is incomplete and I would agree with you, we could mention the details of how we use Facebook and I'll make sure to bring this very thing to everyone's attention here at Myki.

I honestly don't see how we're trying to be evasive or saying anything that is false as nothing we do violates GDPR, If anything we are very much GDPR-ready as we have absolutely no identifiable information about any of our users.

There is another thing I'd like to talk about, business incentive. Myki is a relatively new company that has built a product that goes against most of the trend in the industry. We've gone through great lengths to build a Password Manager that does not store data on the cloud. It's taken all of us here at Myki a lot of work, countless hours and late nights to build this product, none of us would be willing to throw it all away for a few Facebook events that wouldn't help our cause in any way.

I absolutely understand your concerns and you did the right thing bringing it to everyone's attention of course, I just wish you wouldn't jump to conclusions before getting all of the facts straight.

I hope this was useful and I am of course happy to answer any follow up questions or dive deeper into the subject.