Friday, August 8th

    A men‑targeted dating ratings app called TeaOnHer is exposing personal data

    img
    A men‑targeted dating ratings app called TeaOnHer is exposing personal data i.e. driver’s licenses, selfies, usernames, emails of ~53,000 users due to unprotected storage.

    TeaOnHer, a dating application for men, has exposed sensitive user data. Approximately 53,000 user records were leaked, and the leaking data includes driver’s licenses, selfies, usernames, and email addresses, all because links to app storage were unprotected. The developer’s email and password, allowing access to the backend, were also publicly available. Alarmingly, private posts that targeted women and included nude images were available without logging in. 


    The developer has received multiple warnings about the security risks of the app yet has chosen not to respond. The app has maintained its trending position on the App Store despite data being exposed. 


    The leak comes on the heels of a similar data exposure incident with Tea, the app for women, which also leaked ID documents as well as private messages. The TeaOnHer breach further demonstrates the potential for privacy risks within niche dating apps.