Could a lawsuit be brewing? A spokesperson with Valve has told Bleeping Computer the company is “looking into what information the Epic launcher collects from Steam” following allegations the software was stealing users’ information without their express permission. Engineers with Epic have admitted some of the scrapped data could be sent to the company's servers. In other words, Valve doesn't think the Epic Store client should be touching localconfig.vdf at all, and presumably would prefer it if Epic used the Steam API to gather friends lists. For Epic's part, it has not said that the entire file is uploaded, only that it parses out user IDs and uploads hashes of them, should users import Steam friends. In the future, Valve could potentially encrypt local user data to prevent the Epic client and other software from copying it.