It’s 2023 people and I’m staggered how many apps / sites I use that leak personal data.

Yesterday, someone asked my to try an AI coaching platform. It felt buggy so I started looking at the requests.

Mins later I was able to view customer emails, DoBs, photos and location. Thousands of them.

Fortunately I used the apple private email feature.

As someone legitimately into privacy, I’d like to know what others would do to report this.

The company is US based, a startup - too small for a data officer. Raised 250k.

I see this a lot still - it’s not 2010 anymore and sloppy engineering should be a thing of the past!

Thoughts…