An App You Used Leaked Its Users' Photos or IDs. What Now?
An email says an app you used exposed its users' photos or IDs. If you uploaded them, a copy sits on that company's servers, and you cannot pull it back. Limit the damage today, and stop uploading what you would not want public.
Get an email when Cryptile is on the App Store
What do I need to know?
- The leak is on their side. Your phone's passcode did nothing to stop it.
- Deleting the app deletes nothing. The copy lives on their servers.
- Past uploads are the risk. Act on what you sent, not on what you still hold.
What should I do today?
- List what you uploaded. Selfies, ID scans, passports, bills, private photos.
- Ask for deletion. Use the app's privacy page or email its support. Keep a copy of your request.
- Change the password for that account, and anywhere you reused it.
- Turn on two-factor sign-in where the app offers it.
- Watch for fraud. Check your bank and card statements. Expect phishing emails that quote real details.
- Replace what can be replaced. If an ID number leaked, ask the issuer what to do. Many countries let you place a fraud alert or credit freeze.
What if intimate photos were in it?
Do not pay anyone who contacts you. Do not delete messages. Screenshot them and report them to the platform and the police. Many places have free helplines for image abuse. See sextortion evidence on iPhone.
Would a vault have prevented this?
Only for photos you never uploaded. A vault keeps files on your phone under a key from your pattern. Nothing goes to a server, so there is no server copy to leak.
It would not have helped with anything you chose to send to the app. An app that needs your photo to work gets the photo.
How do I upload less in future?
- Ask whether the app needs the file. Many do not.
- Share one photo, not the library. Pick Limited Access in the permission prompt.
- Cover what is not needed. See how to blur part of a photo.
- Keep originals in a vault. Copy out only the one you must send.
What this doesn't protect against
A vault cannot protect a file once you send it to someone else. It cannot undo an earlier leak. If you keep a photo in a vault but still send it to an app, the app holds the copy.
Do it with Cryptile
Cryptile keeps photos and documents encrypted on your phone with AES-256-GCM. The key comes from your pattern. There is no account, and no server holds your files.
Cryptile is free to start, with encrypted iCloud backup included.