had a phone number attached, just removed it, it allowed me to use my authenticator as verification.
this post was submitted on 19 Oct 2023
57 points (95.2% liked)
Privacy
31982 readers
335 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
as an aside, sms 2fa is the worst 2fa as sms is completely unencrypted.
And can be SIMjacked.
Prepaid is the way. It shouldn't be but it is.
Why not just delete your Discord account? That should delete your number.
The world would be a better place if companies deleted your information as soon as you delete your account.
Anything else you do doesn't matter either if that's your approach. Only not giving them your number in the first place would work.
Good news when you are an EU citizen. Send out a GDPR request.
They have probably already sold the information 100 times.
They may retain the phone number as an exemption to GDPR as a reason to fight spam and abuse of their system.
EDIT: look for the "legitimate interests" clause in GDPR.
How? According to GDRP phone numbers is considered personal information, they dont have any right to use it to combat spam if the person asked for erasure.
Combatting spam and other attacks on their systems where the protection of said systems outweighs individual users' rights is PII processing that you explicitly do not need consent for under the GDPR.
This is called "legitimate interest".
That could be covered under the "legitimate interests" clause, which covers "Fraud prevention" among other things. They do need to justify it if there is an audit.
Tell them, you know what will likely happen? The damn Clyde Bot will respond in the most unhelpful way. They do not give a single shit, they demonstrate that every time you try to get touch about anything that isn't one of the three things they let you contact them about.
then they have a huge huge problem at hand. And a big fine to pay as well.
If you are in the US, there are apps that give you a temp number you can use for calls and texts. It gets deleted when you don’t use it after sometime or manually delete it from your account.
It's over