I don't want an account. Can I just use my fitbit with my phone?

[Mad-Mick]

Account now set up on my PC, I've not synched my Fitbit yet as I don't have Bluetooth on my PC, I thought 'hey why not just use my mobile phone instead'... So off to Google Play and the free Fitbit app only to find out that this 'app'  wants total control over my phone, including  access to everything, the ability to make phone calls, send and receive  texts  (both calls and texts may be to numbers I can be charged for), delete data, search my accounts and  ravage my SD card. WTF is this all about I agree that some data transfer is necessary for this type of tracker, but this is over and beyond anything, FitBit genuinely needs to run its services... NO way am I installing this malware on my phone so right now the PC account seems a safer choice as they seem to be using the same stuff Google has already has.

[Rich_Laue]

@Mad-Mick it is not asking for total control, and with most phones a lot of these permissions may be turned off. 

If you want to know. 

It is not asking for

• Phone calls to send the notification onto the tracker. 
• This is the same fore messages and calendar. 
• Location since the app can use your gps to record the path of a walk or run. 
• Camera to be able to post photos in the community. 
• Contacts to be able to send the callers name to the tracker. 
• Storage to be able to save data or post pictures to the community. 

As for SD Card. Your iOS device does not have an SD card. The fitbit app does not have the ability to delete anything on the phone, so you so not have to worry about this. 

[Mad-Mick]

Rich-Laue.... My Andriod Phone does have an SD card and FitBit wants full access to it including the ability to store, delete and change data, any data

I am aware of what other apps ask for which is why I have very few on my phone, those I use have very limited access and no access to my contacts or accounts.

 Can you help me with:-

How do you turn off access to the SD card, Contacts, camera, Microphone etc....?

 How do I prevent FitBit from waking my device and starting remotely recording or filming?

 This is the List of what FitBit requires, I agree that some are required but do you think that all these permissions are necessary?

Storage

• read the contents of your USB storage
• modify or delete the contents of your USB storage

Location

• approximate location (network-based)
• precise location (GPS and network-based)

Photos / Media / Files

• read the contents of your USB storage
• modify or delete the contents of your USB storage

SMS

• send SMS messages
• receive text messages (SMS)

Microphone

• record audio

Camera

• take pictures and videos

Wi-Fi connection information

• view Wi-Fi connections

Contacts

• read your contacts
• find accounts on the device

Phone

• directly call phone numbers
• read phone status and identity
• read call log

Identity

• find accounts on the device

Device ID & call information

• read phone status and identity

Other

• receive data from Internet
• control vibration
• full network access
• access Bluetooth settings
• control Near Field Communication
• pair with Bluetooth devices
• run at startup
• view network connections
• prevent device from sleeping
• read Google service configuration

[Rich_Laue]

Sorry for that, you have posted on the iOS board, it is only natural for me to believe that we are referring to an iOS device. 

Also this thread is about the privacy of days on the fitbit server, not permissions. 

I've moved your Android question to the Android board. 

You can go to the phone settings, apps, fitbit, permission and turn whatever you want off. 

 

I have know idea how fitbit will wake up your device and start recording without you requesting the app to start recording an excersize like walk, run, or hike. While mobile track is running fitbit will keep the phone on so the user has quick access. The user may tap the power button to turn off the display. Mobile track has the ability to Barack down the event into sections and will vibrate the phone to let the user know a set time or distance has passed 

Run at start-up can be disabled by turning off all day sync and disabling notifications. This will also disable connected GPS and some of the apps on a versa, Charge 3, and ionic. Also the user will not be able to control music on the phone from the wrist. 

Storage

• read the contents of your USB storage I explained fhis
• modify or delete the contents of your USB storage I explained this

Location

• approximate location (network-based)
• precise location (GPS and network-based) for using GPS while recording an activity

Photos / Media / Files

• read the contents of your USB storage
• modify or delete the contents of your USB storage For posting in the community and customizing several options in the app

SMS

• send SMS messages
• receive text messages (SMS)To forward onto the tracker 

Microphone

• record audioNo idea, the app never asks to turn on Mike

Camera

• take pictures and videos same as access to storage and may be used to unlock Fitbit Pay. 

Wi-Fi connection information

• view Wi-Fi connections for network connection to sync data

Contacts

• read your contacts. To match up names to incoming phone numbers to pass on to the tracker. 
• find accounts on the device For finding friends with Fitbits in contacts or Facebook 

Phone

• directly call phone numbers Fitbit can't make calls but can respond to texts. 
• read phone status and identity Notifications
• read call logYou understand why. 

Identity

• find accounts on the device

Device ID & call information

• read phone status and identityMostly to identify user and security, especially with fitbit pay if user unlocks phone with face or iris. 

, Other

• receive data from Internet to display your data
• control vibrationUsed during Mobile Track
• full network access
• access Bluetooth settings
• control Near Field Communication I don't know why unless to easily share with others through NFC. Never have used this. 
• pair with Bluetooth devices A user can not pair a Fitbit Tracker The fitbit app does the actual pairing. 
• Run at startup so Connected GPS, notifications, apps like weather on the tracker, and all day sync. 
• Riew network connections To setup WiFi on some tracker models
• prevent device from sleeping Used during Mobile Track. User may press power button
• read Google service configuration To unlock Fitbit pay settings the App requires the user to enter the phone unlock. 

[Rich_Laue]

Location needs to be on during a sync. 

This has been required by Android after they patched a BT vulnerability that enables someone to take complete control of a users phone, without permission, during a BT MAC request. 

[Mad-Mick]

@ Rich_Laue.  Thanks for the reply and detailed explanations. My queries were not why the app needs to do this, but the fact that by doing so it can  (or be used to) do things it is not supposed to be doing, much as giving a key to your workman to do a specific  job in your house then find out he has been searching through your possessions. Unfortunately it is impossible (or so expensive to make it nigh on impossible) to prevent the app being used for purposes other than those specified....

As I am neither important enough, or rich enough to attract any attention ( unless some hacker would like to pay off my overdraft). I have installed the app now and turned off as many features as I can (contacts, camera etc... so it work will still  for me without compromising my personal  data.

[Rich_Laue]

Sure you may revoke access to the services an app requests. 

Without knowing what operating system, I'll just say that to close a backdoor that allowed that workman to sneak into your house, without your permission and without having a key, while you get the mail. Android when closing this access now requires location services to be enabled when forcing a sync.