It seemed like things aren’t going very well for Skype. Android Police has discovered that Skype’s Android client leaves your particular info wide open for grab. The publication reports that the app has SQLite3 databases where all your info and chat logs are stored, and that Skype forgot to encrypt the files or enforce permissions, which is similar to leaving keys hanging out of the door.

What does that mean? Well, any rogue app could now easily grab all your data and phone home — an app much like Skypwned. That’s a test program Android Police built to prove the vulnerability exists, and it works wonder, despite only asking for basic Android storage and phone permissions, it instantly displayed our full name, phone number, email addresses and a list of all our contacts without requiring so much as a username to figure it out.

Android Police says Skype is investigating the issue now, with no estimated time to patch.

SOURCE via Android Police