WhatsApp, one of the most popular apps in the world, contravenes international privacy laws because it forces users to provide access to their entire address book, Canadian and Dutch data protection authorities said.
WhatsApp, which ranks as one of the world's top five best-selling apps, is an instant-messaging application for smartphones including Apple's iPhone and Research in Motion's Blackberry.
The report comes at a time of increased criticism of internet companies, such as Facebook, over the storing and sharing of personal information.
Produced by California-based WhatsApp Inc, it provides a free internet alternative to SMS, or text messaging, sending more than a billion messages every day.
Canada's Office of the Privacy Commissioner and the Dutch Data Protection Authority, in a joint report released on Monday, said the app violated privacy laws because users have to provide access to all phone numbers in their address book, including both users and non-users of the app.
WhatsApp was not immediately available to comment.
The investigators found that WhatsApp retained the mobile numbers of non-users, contravening privacy laws.
WhatsApp said it committed to making changes to protect users' privacy, including allowing the manual addition of contacts, according to the investigators. Last September, it introduced encryption for its mobile messaging service, partly in response to concerns raised by the investigation.
The Dutch agency said it would continue to monitor WhatsApp and could impose penalties if privacy concerns continued.
