“which Tea’s own privacy policy promises are “deleted immediately” after authentication.”
This is a the most important thing about this article. No, no one EVER deletes anything. “Your data is safe with us” is the biggest lie of the century. The only way you are safe is to never give any data to them in the first place.
I think the premise of this website is revolting, but I also think the women will have a really strong legal case. The technical details behind this “hack” are cringeworthy. Absolutely fundamental cybersecurity practice was completely neglected.
“Your data is safe with us” and “i’ve had a vasectomy” ...