{"id":7135,"date":"2017-01-07T18:53:22","date_gmt":"2017-01-08T01:53:22","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=7135"},"modified":"2019-09-18T19:47:26","modified_gmt":"2019-09-19T02:47:26","slug":"exchange-apps-may-share-your-personal-information-with-third-parties","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/exchange-apps-may-share-your-personal-information-with-third-parties\/","title":{"rendered":"Exchange Apps\/Add-ins May Share Your Personal Information with Third-Party Services"},"content":{"rendered":"<p><span style=\"color: #000000;\">[dropcap]H[\/dropcap]ow many of you know that Microsoft Exchange on-premises and Exchange Online in Office 365 can share your personal data with third party services? For example, any map addresses found in an Exchange email are send to Bing. These addresses can be shared with a third-party service. But there is much more that can be shared with these third-party services. Do you know who these third-parties are? Let me explain what I am talking about and then I will tell you how you can prevent this sharing of personal data.<\/span><\/p>\n<h4><strong>Exchange Server 2013<\/strong><\/h4>\n<p><span style=\"color: #000000;\">If you go to the Exchange 2013 admin center, you will see an <em>organization<\/em> link on the left hand side that you can configure. When you click on the link you will see the following three options:<\/span><\/p>\n<ol>\n<li><span style=\"color: #000000;\">sharing<\/span><\/li>\n<li><span style=\"color: #000000;\">apps<\/span><\/li>\n<li><span style=\"color: #000000;\">address-lists<\/span><\/li>\n<\/ol>\n<p><span style=\"color: #000000;\">Click on the <em>apps<\/em> link and you will find that the following five apps are already installed for you by default. You cannot uninstall these apps, and you cannot delete them because the delete button is grayed out.<\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7145\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013.png\" alt=\"\" width=\"1696\" height=\"533\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013.png 1696w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013-300x94.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013-768x241.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Third-party_sharing_Exchange2013-1024x322.png 1024w\" sizes=\"(max-width: 1696px) 100vw, 1696px\" \/><\/a><\/span><\/p>\n<h4><strong>Exchange Online in Office 365<\/strong><\/h4>\n<p><span style=\"color: #000000;\">In Office 365 Exchange Online, you will also see the <em>organization<\/em> link in the Exchange admin center on the left hand side, but there are only two options that you can configure.<\/span><\/p>\n<ol>\n<li><span style=\"color: #000000;\">sharing<\/span><\/li>\n<li><span style=\"color: #000000;\">add-ins<\/span><\/li>\n<\/ol>\n<p><span style=\"color: #000000;\">[highlight]The apps in Exchange 2013 on-premises are called add-ins in Exchange Online in Office 365. The text that describes the apps\/add-ins is almost identical, with some minor differences that don&#8217;t change the meaning of the text.[\/highlight]<\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7137\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01.png\" alt=\"\" width=\"1903\" height=\"506\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01.png 1903w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01-300x80.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01-768x204.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2016\/12\/Third_party_sharing_01-1024x272.png 1024w\" sizes=\"(max-width: 1903px) 100vw, 1903px\" \/><\/a><\/span><\/p>\n<h4><strong>What Do the Apps Do?<\/strong><\/h4>\n<p>In this article, I will use the screenshots from Exchange 2013 admin center. These apps are almost identical to the add-ins in Exchange Online. There are five apps installed by default and each serves a different purpose.<\/p>\n<ol>\n<li>Action Items<\/li>\n<li>Bing Maps<\/li>\n<li>My Templates<\/li>\n<li>Suggested Meetings<\/li>\n<li>Unsubscribe<\/li>\n<\/ol>\n<p>The first screenshot at the beginning of this article displays the Action Items app. The following four screenshots depict the remaining apps. As you can see, four of the five apps say &#8220;This app will not share your data with any third-party service.&#8221; The Bing Maps app says &#8220;This app will send addresses to Bing but will not share your data with any third-party service.&#8221;<\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7141\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02.png\" alt=\"\" width=\"1474\" height=\"323\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02.png 1474w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02-300x66.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02-768x168.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_02-1024x224.png 1024w\" sizes=\"(max-width: 1474px) 100vw, 1474px\" \/><\/a><\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7142\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03.png\" alt=\"\" width=\"1477\" height=\"328\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03.png 1477w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03-300x67.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03-768x171.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_03-1024x227.png 1024w\" sizes=\"(max-width: 1477px) 100vw, 1477px\" \/><\/a><\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7143\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04.png\" alt=\"\" width=\"1480\" height=\"326\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04.png 1480w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04-300x66.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04-768x169.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_04-1024x226.png 1024w\" sizes=\"(max-width: 1480px) 100vw, 1480px\" \/><\/a><\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7144\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05.png\" alt=\"\" width=\"1471\" height=\"337\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05.png 1471w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05-300x69.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05-768x176.png 768w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Exchange_addins_05-1024x235.png 1024w\" sizes=\"(max-width: 1471px) 100vw, 1471px\" \/><\/a><\/span><\/p>\n<p><span style=\"color: #000000;\">What&#8217;s unique about these apps is that:<\/span><\/p>\n<ol>\n<li><span style=\"color: #000000;\">They are all installed by default in Exchange 2013 and in Exchange Online in Office 365.<\/span><\/li>\n<li><span style=\"color: #000000;\">They are all enabled by default.<\/span><\/li>\n<li><span style=\"color: #000000;\">They can not be uninstalled or deleted, but they can be disabled.<\/span><\/li>\n<li><span style=\"color: #000000;\">They all assure you that the app <strong>will not share your data<\/strong> with any third-party service.<\/span><\/li>\n<li><span style=\"color: #000000;\">They all warn you that the app <strong>may share your data<\/strong> with a third-party service.<\/span><\/li>\n<\/ol>\n<p><span style=\"color: #000000;\">So what does this mean? In plain English, it means that <span style=\"color: #ff0000;\">the app will not share your data, but the app may share your data<\/span>. Are you confused? Welcome to the club.<br \/>\n<\/span><\/p>\n<h4><span style=\"color: #000000;\"><strong>What Kind of Information Can Be Shared?<\/strong><\/span><\/h4>\n<p><span style=\"color: #000000;\">The information shared with the third-parties can include the following <strong>personal information in any message or calendar item<\/strong> in Microsoft Exchange on-premises or Exchange Online in Office 365:<\/span><\/p>\n<ol>\n<li><span style=\"color: #000000;\">The subject of your email message.<\/span><\/li>\n<li><span style=\"color: #000000;\">The body (i.e. all the content) of your email message.<\/span><\/li>\n<li><span style=\"color: #000000;\">The name of the sender.<\/span><\/li>\n<li><span style=\"color: #000000;\">The name of all the recipients.<\/span><\/li>\n<li><span style=\"color: #000000;\">Any attachments that you included in your message.<\/span><\/li>\n<li><span style=\"color: #000000;\">Any phone numbers that were included in your message body or subject.<\/span><\/li>\n<li><span style=\"color: #000000;\">Any postal addresses that were included in your message body or subject.<\/span><\/li>\n<li><span style=\"color: #000000;\">Any URLs that you typed in your message body or subject<\/span><\/li>\n<\/ol>\n<h4><span style=\"color: #000000;\"><strong>Disabling the App<\/strong><br \/>\n<\/span><\/h4>\n<p><span style=\"color: #000000;\">Although these apps\/add-ins can&#8217;t be deleted or uninstalled, luckily you have the ability to disable them. If you don&#8217;t like Microsoft to share your personal information, simply double-click the app\/add-in and clear the box <em>Make this app available to users in your organization<\/em>. You can also change the default behavior, so it is disabled, or force the app to always be enabled so the users can&#8217;t disable this app. I guess this option is for those third-parties who receive all the personal user data (just kidding!).<\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_the_app.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7149\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_the_app.png\" alt=\"\" width=\"679\" height=\"376\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_the_app.png 679w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_the_app-300x166.png 300w\" sizes=\"(max-width: 679px) 100vw, 679px\" \/><\/a><\/span><\/p>\n<p><span style=\"color: #000000;\">When you disable the app, the <em>Provided To<\/em> column changes from Everyone to Nobody. In the example below, all the apps are disabled. Compared this to the first two screenshots where the Provided To option was set to Everyone.<\/span><\/p>\n<p><span style=\"color: #000000;\"><a style=\"color: #000000;\" href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_all_apps.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-7150\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_all_apps.png\" alt=\"\" width=\"772\" height=\"210\" srcset=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_all_apps.png 772w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_all_apps-300x82.png 300w, https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2017\/01\/Disabling_all_apps-768x209.png 768w\" sizes=\"(max-width: 772px) 100vw, 772px\" \/><\/a><\/span><\/p>\n<hr \/>\n<p><span style=\"font-size: xx-small; font-family: Verdana; color: #000000;\">Copyright \u00a9 2017 SeattlePro Enterprises, LLC. All rights reserved.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[dropcap]H[\/dropcap]ow many of you know that Microsoft Exchange on-premises and Exchange Online in Office 365 can share your personal data with third party services? For example, any map addresses found in an Exchange email are send to Bing. These addresses can be shared with a third-party service. But there is much more that can be [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":10545,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[43,3,63,24],"tags":[],"class_list":["post-7135","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-exchange-outlook","category-office-365","category-security"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2018\/11\/Exchange_logo_250x250.png","_links":{"self":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/7135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/comments?post=7135"}],"version-history":[{"count":0,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/7135\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media\/10545"}],"wp:attachment":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media?parent=7135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/categories?post=7135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/tags?post=7135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}