The exposure was caused by a configuration error in the app’s backend system, allowing unauthorized individuals to access user information without special permissions. App Creator Rejects Findings and Denies ExposureWhen contacted by phone, the app’s founder disputed the researcher’s claims and denied that any sensitive user data had been exposed. “There is no sensitive information exposed, that’s just not true,” the founder said. This test indicated that the vulnerability remained active and that new user data continued to be exposed, contradicting the developer’s claim that no such data existed or was accessible. Guido compared the situation to earlier issues involving Amazon S3, a cloud storage service that historically exposed large volumes of sensitive data until Amazon implemented stricter safeguards.