Archive — US — techcrunch
How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes
TeaOnHer, a dating-gossip app, exposed users' personal information, including driver’s licenses, due to severe security flaws. These vulnerabilities were identified within 10 minutes, showing the risks associated with apps demanding sensitive data. The developer, Xavier Lampkin, did not respond to requests for comment or address user security despite the significant privacy implications. Popularity of the app raises concerns about the ongoing risks of personal data exposure in tech.
Key points
- TeaOnHer app designed for men to share dating information is leaking personal data.
- Security flaws allowed access to users' driver’s licenses and sensitive information.
- Issues discovered by TechCrunch within 10 minutes of investigation.
- Developer did not acknowledge faults or respond to security breach inquiries.
- API flaws enabled unauthenticated access to user data, posing significant privacy risks.
Why it matters
- The increasing importance of data security and privacy in app development mirrors current trends around user consent and data protection laws.
- Ongoing concerns about apps verifying identity documents highlights systemic security challenges with private data management.
- This incident connects to a broader narrative about the vulnerability of personal data as more apps request sensitive information.
The flaws in TeaOnHer's security highlight the urgent need for developers to prioritize data protection seriously, especially with the growing trend of identity verification in tech applications, ensuring user privacy isn't compromised for convenience.