A federal class action lawsuit claims the mobile app for the Path social network spies on consumers; gathers sensitive data such as their exact location, photos and videos; tracks their mobile browsing activity; and more, and then stores this information so insecurely that its accessible to “even an unsophisticated hacker.”

According to the Path app class action lawsuit, Path gained access to users’ mobile devices without authorization and consent in order to obtain and store contact address data, including the personally identifiable information of minor children, by bypassing the technical and code-based barriers intended to limit access, in addition to bypassing users’ privacy settings, including offsite social network settings.

“The Defendant perpetuated this fraudulent activity knowingly, and with the intent to obtain data, including the mobile browsing activities of its users,” the Path app privacy class action lawsuit says.

The Path mobile app class action lawsuit is brought on behalf of all U.S. residents who possessed a mobile device and downloaded the Path Application from November 15, 2010 to the date of Class certification. It is seeking a permanent injunction prohibiting the unlawful activities described in the complaint, disgorgement, damages and restitution.

A copy of the Path Mobile App Privacy Class Action Lawsuit can be read here.

The case is Oscar Hernandez v. Path, Inc., Case No. 12-cv-1515, U.S. District Court, Northern District of California.