5/18/2025 at 9:39:01 PM
I started using Roam and as a proper geek, dug through the data it sends back and forth about me and my notes in the browser console. It was doing access logs and some random day I saw some random dude’s name in the access log for my notes. I reached out to ask. They told me he was a new employee. I saw no reason to save personal notes and ideas on a platform where any employee can enjoy them. Thereafter I took my notes to tools i wrote myself. Very enlightening to the incentives for building such tools.by dzink
5/19/2025 at 7:28:38 AM
Another thing to add: I had deleted my Roam Research account a long time ago by now, but the media I uploaded on it is still available through the Firebase links.by coldblues
5/20/2025 at 5:32:28 AM
Hey Baibhav from the Roam Engineering team hereI think this might be a remnant of the time we did not delete media for graphs for cases we thought they might've just migrated to a new graph. For context, a semi-common pattern was for users to export their graph and restore to a new graph, so that they can change the name. Could you have gone through a similar process before deleting your account?
If you please contact support@roamresearch.com and provide the firebase links (even just a few should be okay to find the media), then we can proceed with the deletion for you. Sorry for the issue
by baibhavbista
5/20/2025 at 5:28:09 AM
Hey,I work at Roam on the engineering team.
I do not claim to know about this case, could you send me or support@roamresearch.com any more details you have re: this?
I can, however, tell you what the protocol has been since I've been working here at Roam (since 2021). No one can access user notes without an explicit written permission being granted. We have logs for when any graph is accessed via admins, and so, any member on the team accessing user notes without permission would be fired immediately. This was the operating policy and was made clear to me on my onboarding itself, along with the policy of immediate termination in the case of abuse.
Additionally, since Jan 2022, we have the ability for users to create End-to-end encrypted graphs. These graphs provide an extra level of protection - where your notes (& media) would be safe even in the worst case of Roam being hacked or compelled by law agencies to give info (to be clear, we haven't had either happen)
by baibhavbista
5/20/2025 at 8:40:48 PM
Hi Baibhav, This was in August 2020. I have attached screenshots as a reply to Josh's reply above. It was early in the days so I could understand the founder perusing as a way of seeing how users are using the site, but not some random dude with a gmail. The logs were showing in my local storage on the browser. My notes were just test notes, so I didn't have anything important to worry about, but I never used Roam as a result.by dzink
5/21/2025 at 3:19:04 AM
Hey, clarifying (for anyone who sees this thread and not the other replies)Roam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.
More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945
by baibhavbista
5/20/2025 at 2:22:05 PM
Hi, co-founder of Roam, Josh here. I don't recall your case ever being brought up to me, but as Baibhav said in his comment, we have strict no-access rule for engineers. They (and me) are only allowed to open your graph if given explicit permission by you through support. We have always had this rule and it's in our terms and conditions.I think I found your account and I don't see any access logs to your graph from anyone other than your account. If you can provide any more info or screenshots of we would be able to dig deeper into exactly what you saw. It could have been a console log or a hard coded employee email in the code.
We've always cared deeply about user's privacy and ownership over their notes. This is why we've had this policy from the start and focused heavily on local first features and data portability. We offer fully offline graphs, where the data never touches our server and is never able to be accessed by anyone on our team. We also offer fully encrypted graphs, which are stored on our servers but are not able to be read by anyone without the password (our team cannot read your data).
by hashbrown490
5/20/2025 at 8:18:32 PM
You are in luck. I found a little video I took of the screen when it happened. It was from Aug 11 2020. Here is a screenshot with the log details: https://www.dropbox.com/scl/fi/g9jv8eh1ugi5qda0c6azx/0811202...by dzink
5/20/2025 at 8:35:10 PM
Here is another screenshot and screenshots of the email exchange with the person in the logs. https://www.dropbox.com/scl/fi/v0x26d5jvou5k9gvx5tnd/IMG_205...Emails: https://www.dropbox.com/scl/fi/s6ed1brrcvc0hncig7nm0/IMG_205...
https://www.dropbox.com/scl/fi/ohafavhr9nlqfedlbfxrd/IMG_206...
by dzink
5/21/2025 at 1:35:43 PM
Baibhav posted this screenshot down the thread, but I wanted to add some more context.We followed up with our ex-employee to get the final (cutoff) message in this email thread https://firebasestorage.googleapis.com/v0/b/firescript-577a2...
In it he tries to explain that these are help graph transactions they are seeing. I do apologize if you didn't understand it at the time, but we did try to explain it to you. I Hope this clears up everything for anyone following along.
by hashbrown490
5/21/2025 at 12:09:33 AM
What the hell. Thank you for keeping the receipts. That's astonishingly not-ok.by kstrauser
5/21/2025 at 3:16:19 AM
Hey, clarifyingRoam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.
More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945
by baibhavbista
5/21/2025 at 4:56:27 AM
Got it. Not being an expert on that, I’ll take you at your word.But in the spirit of constructive criticism, your user had been carrying that belief for 5 years now because no one explained it when they originally reported the finding.
by kstrauser
5/21/2025 at 4:00:22 AM
Thanks for sharing, see Baibhav's response for what happened here, these logs you are seeing are for the public help graph, not your personal graph.by hashbrown490
5/21/2025 at 3:12:33 AM
Hey thank you for replying!I understand what the screenshots are saying and this makes it clear that it was a misunderstanding and that NO ONE ACCESSED YOUR GRAPH(S). Please let me explain
Lets start with your first screenshot: https://www.dropbox.com/scl/fi/g9jv8eh1ugi5qda0c6azx/0811202...
If you take a look at this screenshot, it shows that the values you saw are in the indexeddb db "..._help-tx". The "help" bit denotes that those are the actions/txs taken in the "help" graph (which you can access via https://roamresearch.com/#/app/help). The reason you're seeing Bardia and Conor's emails there is because they wrote in the help graph (maybe they were writing guides there or adding stuff to the changelog). The reason the help graph data is in your indexedDB is because you probably opened the help graph at some point.
If someone had accessed your graphs, similar txs would have shown instead in the indexeddb dbs "..._DZ-tx" or "..._programming-with-categories-tx"
Everything I've said above can be verified if you say go to any Roam graph, and see what dbs are stored in IndexedDB in the devtools.
Hopefully this makes sense. Also, as Bardia replied in the email, we have never and will never edit user notes without explicit permission.
tl;dr: You thought you were looking at the logs for your graph but you were looking at the logs for the "help" graph. This is easily verifiable from your screenshots itself if you know where to look (details above).
by baibhavbista
5/21/2025 at 5:14:35 AM
Here is a video explanation and verification, in case the above is hard to follow: https://www.loom.com/share/2a0247ab163747508e28e4a79190583aWhat is our fault that we did not clear up this misunderstanding immediately and I'm sorry for that dzink (I think this was during the time of Roam hypergrowth so maybe Bardia missed the later email reply?)
Hopefully, it is now clear that NO ONE accessed your graphs (and no graph is ever accessed without explicit user permission)
P.S. I took this video & wrote this message alongside my earlier one but could not post because HN said "You're posting too fast. Please slow down" XD. Hence the new account. Please do not block me because of this, mod
by baibhavbista5
5/21/2025 at 5:03:57 AM
If I were the user, I would’ve been unsatisfied with that answer. They had logs showing that yes, someone did appear to access their notes. No one seems to have corrected the misunderstanding at the time, which might’ve turned them back into a happy Roam user.Don’t do that. Things like this are an opportunity to overcommunicate. Explain in detail to the user, who’s smart enough to use the tools to reveal the information in the first place. Write up a FAQ entry explaining this for the next person so you can point them right to it. Don’t just reply to say basically “you didn’t actually see that” and leave it at that.
by kstrauser
5/21/2025 at 5:30:48 AM
Thank youYes, definitely a communication misstep on our part, and we could've handled it much better
I have a second comment there too, but got delayed in posting because HN rate-limited my account for too many comments
by baibhavbista5
5/21/2025 at 8:40:30 AM
Confusedhttps://firebasestorage.googleapis.com/v0/b/firescript-577a2...
(looks like this will be my last reply in this thread)
by baibhavbista
5/21/2025 at 5:45:44 AM
Edit: Thanks kstrauser, for letting cooler heads prevail (couldn't delete because this comment had your reply)by baibhavbista5
5/21/2025 at 6:02:09 AM
Don’t do this. For real. Sleep on it, maybe even delete that, and come back fresh in the morning, letting cooler heads prevail. Losing your temper with a user would make you look bad, even if it turns out you’re correct.This can wait until tomorrow.
by kstrauser
5/19/2025 at 12:18:53 AM
Wow, that's very icky.by stevage
5/21/2025 at 3:16:48 AM
Hey, clarifyingRoam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.
More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945
by baibhavbista
5/21/2025 at 6:47:12 AM
OK THANKS FOR LETTING ME KNOWby stevage
5/21/2025 at 8:18:53 AM
sorry for the all caps, my badby baibhavbista
5/19/2025 at 4:11:23 AM
Would you be open to providing some more details on this? Was this a private graph or a public graph?by arbus5672
5/19/2025 at 5:14:30 AM
It happened several years ago - when Conor was holding talks on Clubhouse. I had created an account with a few test notes and went back days later. The notes were not listed or linked anywhere. The person’s email or name was showing in the log but he was not even outed as an employee on linkedin at the time - so I originally thought someone has hacked my account or was accidentally given access to my notes. Then I asked the founder or the person and they said it was a new employee. I have screenshots somewhere but I don’t remember how i reached out to them - if it was a service chat, or email, or twitter, or clubhouse. I always check the network chatter on new sites I use - very enlightening about what they think of customers. A lot of times you see flags for things they want you or don’t want you to be, or what they want to upsell to you. Reactive sites put all kinds of logic in the front end where it doesn’t belong.by dzink
5/19/2025 at 5:24:44 AM
Thanks for elaborating! This is definitely not ok, and the response beyond unacceptable.I've been an active user for a couple of years now and have substantial amount of information stored in Roam. I guess I should have known better than to have sensitive data stored in someone else's servers without encryption.
Time to explore Obsidian and see what the migration path looks like.
by arbus5672
5/21/2025 at 3:18:19 AM
Hey, thanks for being an active Roam users for these years.I want to clarify this (since you might not see the other replies in this thread)
Roam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.
More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945
by baibhavbista
5/19/2025 at 1:23:47 AM
That does seem very shady, did you at least get a written apology from him/his boss?by MichaelZuo
5/19/2025 at 7:55:13 PM
Forget an apology, was there any accountability?Have they clamped down on employee access? Was this "new employee" let go for accessing user data without any apparent reason?
by radicaldreamer
5/20/2025 at 5:34:53 AM
Hey, Baibhav from the Roam Engineering team hereRelevant reply here: https://news.ycombinator.com/item?id=44038085
by baibhavbista
5/21/2025 at 3:17:18 AM
Final relevant reply here:Roam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.
More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945
by baibhavbista