Tea
A dating app records more than you type into your profile, and one permission at sign-up covers all of it, often across every app the company owns. Closing the account rarely clears the file, because safety holds keep part of it long afterwards.
Reported incidents
72,000 images, including photo IDs, and over a million private messages exposed
2025-07-29Affected Image storage and direct messages
Tea, a dating safety app where women share information about men they have dated, said in July 2025 that images stored before February 2024 had been accessed. TechCrunch reported on 29 July 2025 that 72,000 images, including selfies and photo IDs, were taken and posted on 4chan. A security researcher then found a second flaw that exposed more than 1.1 million private messages sent between early 2023 and July 2025, covering phone numbers, abortions and infidelity. Tea switched off direct messages on 29 July, saying: "Out of an abundance of caution, we have taken the affected system offline."
People affected typically ask Tea to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.