Starbuck's mobile app keeps hold of users usernames, e-mail addresses, and passwords according to information from the coffee chain's executives Computer World reported Thursday.
"We were aware," Curt Garner chief information officer at Starbucks, and Adam Brotman Starbucks chief digital officer told Computer World. "That was not something that was news to us," the two men told Computer World.
"What you've described is fair, at a high level," Garner told Computer World. "From a design perspective, this could have potentially happened," Garner told Computer World. "We're getting into security measures," Garner told Computer World.
"A company like Starbucks has to make the choice between usability to drive adoption and the potential for misuse or fraud," Charlie Wiggs, general manager at Mozido told Computer World. Wiggs is also the company's senior vice president. "Starbucks has opted to make it very convenient. They just have to make sure that their comfort doesn't overexpose their consumers and their brand," Wiggs told Computer World.
Daniel Wood, a security researcher found the information's ease of access, and reached out to Starbucks in November Computer World reported.
Wood put his findings in print after he kept getting sent to the company's customer service department Computer World reported.
"If you grab someone's phone, you can effectively go through this log and see effectively where this person has been," Wood told Computer World. "It's a bad thing for user privacy," Wood told Computer World.
"Yes, it does surprise me," Avivah Litan, security analyst at Gartner told Computer World. "I would have expected more out of Starbucks. At least they should have informed consumers."
Consumers can elect to not have their password stored in the app, which requires them to enter their username and password when they use the app Computer World reported.
Starbucks launched 1,000 limited metal gift cards for the 2013 holiday shopping season a company press release reported.
