BlackBerry has come out and confirmed what we stated earlier about a report claiming they were passing email credentials to BlackBerry’s servers. As I said before BlackBerry does this to help configure your email account on BlackBerry 10. Even more so BlackBerry has been doing this sort of configuration securely for over a decade with BIS in their data centers. BlackBerry got back to me with the following statement about the report:
“BlackBerry’s Discovery Service uses credentials provided by the user to communicate and connect with the mail server. This process is done to simplify the setup allowing BlackBerry to configure the various options for server names, ports, protocols and server options. The user credentials are only used during the setup of the account and BlackBerry does not store the usernames and passwords. This process is covered in the Terms and Conditions that the user accepts when they start using the device.Users can bypass the Discovery Service by using the Advanced Configuration option to manually enter all of the required server configuration information.”
In other words BlackBerry uses the credentials you input to help setup your account. They have a whole configuration database for every different type of email account on their servers which would be unmaintainable on the devices themselves. This is why setting up an email for a non-popular service is such a pain on Android and even iOS devices.
In short: move along folks there is nothing to see here…