Kinda pissed at @tootdon right now for not disclosing that they forward public toots to an indexing serving, because I would’ve wanted to know that (and to disable it).
But the immediate reaction of “use open source lol”: did you personally compile it? If not, you’re no better off. You’re trusting the app packager to compile only the code in the public repo.
And for that matter, do you trust that your instance admin isn’t doing the same?
Joking aside. In the midst of #deletefacebook a few privacy concerns have come to light on mastodon too. For example, admins can see ALL toots on an instance. "Private" or otherwise.
Important note: mastodon doesn't have "Private messaging", it has 1:1 messaging only. I know this has been raised to @Gargron and options are being explored of maybe having a warning msg.
Fosstodon is a Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.