"Tea" app - user database leaked today (incl. drivers license & IDs). Daily reminder not to give your ID to online services [THEY DO NOT PROTECT YOUR INFORMATION]
-
Uh... What's the tea app?
Edit: from what I can gather based on the last link attached to this post it seems to be some kind of app for women to talk about men they've dated. Why that needs drivers license uploads is a whole other question and definitely should have raised some massive red flags for anyone thinking about using it.
The app required ID uploads ostensibly to verify that you were a woman signing up, men were not allowed to join for obvious reasons
-
"talk"
They try to get a pass on this by saying it's about "safety" and reporting creeps. But it's filled with women posting dudes and gossip. It gives me the same vibes as those sites back in the day that were shut down because they were essentially revenge porn sites. Same shit different form.
Yes, trying to warn other women about a man you dated who abused you or gave off weird vibes is definitely the same as getting your nudes or porn video of yourself leaked against your will onto the public internet for everyone to see
-
What's the alternative to warning strangers about predators?
As usual on Lemmy, the answer is just for women to shut up and listen to what the men want
-
If I had to choose between a government and a private entity to store my personal governmental records (e.g. age and name), I'd 100% choose the government first.
easy to say, but that depends entirely on the government and company doesn't it?
-
Gives me no pleasure to add it to idcaboutprivacy
Free and open source—feel free to contribute.
Nice site you got there! Made from scratch or using some service/app?
-
Remember the UK new safety law.
https://techcrunch.com/2025/07/15/reddit-rolls-out-age-verification-in-the-uk-to-comply-with-new-rules/Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan
“DRIVERS LICENSES AND FACE PICS! GET THE FUCK IN HERE BEFORE THEY SHUT IT DOWN!” the thread read before being deleted.
404 Media (www.404media.co)
Friendly reminder that some services do need your ID otherwise they cannot help you or at least they need to very you (accountants, notaries, etc)
edit: I can´t do your tax report if I 1 don´t identify you and 2 I don't have the social security for which I need to do the report
-
Found this article after a quick web search: https://www.forbes.com/sites/kateoflahertyuk/2025/07/24/what-is-tea-the-viral-women-only-app-with-1-million-downloads/
It's an app where women upload photos of men they're dating to get "the tea" on them (red flags, catfishing, etc.). I always wondered if something like this existed. Sucks that it has to, sucks even more if their users are being targeted like this.
The original incarnation on Facebook got sued for posting libel and shut down. There's no judge of truth on these apps it's all she said and no he said.
-
easy to say, but that depends entirely on the government and company doesn't it?
Any government already has all of that information, so, no.
By giving it to a company, you just increase the risks of info leakage.
-
It's a reaction to the toxic nature of the world, what it adds is a drop in the bucket in exchange for avoiding abusers
I mean. A social database I feel is toxic in of itself. It's makes forgiveness harder, it makes changing yourself harder. What's the point in changing if people are gonna look you up in a database like this and perhaps forevermore treat you as if you are like that in the present day, forever. It assumes that humans are unchanging, that once a shitty person always a shitty person.
-
easy to say, but that depends entirely on the government and company doesn't it?
As always life is complicated.
I am talking about my personal situation.^(Do I really need to put a disclaimer to all posts, that mentions all comments are from my own view and might no apply to every situation in every country?)
-
It's a reaction to the toxic nature of the world, what it adds is a drop in the bucket in exchange for avoiding abusers
But are they abusers? You sure they ain't just getting revenge on an ex, making them undateable. How do you even validate this information?
-
Yes, trying to warn other women about a man you dated who abused you or gave off weird vibes is definitely the same as getting your nudes or porn video of yourself leaked against your will onto the public internet for everyone to see
Yea cause that's what these sites totally were doing.
Everyone knows what these places were. 4chan are fucking scumbags but so are the people using these gossip sites. They're both cut from the same cloth
-
Friendly reminder that some services do need your ID otherwise they cannot help you or at least they need to very you (accountants, notaries, etc)
edit: I can´t do your tax report if I 1 don´t identify you and 2 I don't have the social security for which I need to do the report
also fucking AirBnB
-
Remember the UK new safety law.
https://techcrunch.com/2025/07/15/reddit-rolls-out-age-verification-in-the-uk-to-comply-with-new-rules/Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan
“DRIVERS LICENSES AND FACE PICS! GET THE FUCK IN HERE BEFORE THEY SHUT IT DOWN!” the thread read before being deleted.
404 Media (www.404media.co)
I can't wait till I read a similar article about porn sites; especially one where the doxxed individuals are politicians.
-
It either doesn't work or means that they have your ID info anyways. There's no 3rd option
The only entity able to connect you in this case is the identity verification third party. The premise is that a government-backed identification system is more secure than a rando private company.
Private company asks government "hey is this user real and unique", government replies "yes". Private webiste does not need to know your ID. No identifying element needs to be transmitted by the government.
Of course some private companies will need more, and in that case the user, you, can grant them access to data, much like the current authentication systems using Google accounts & co.
In which case the flow would be:
- Rando insecure company asks government "is this user real and unique? I need their name"
- Government website asks you "this rando company wants to know your name"
- You accept
- Goverbment replies to rando insecure conpany "yes, user real, name is X"
That's how it should be.
-
Oh aye, I am the #1 government truster, they should "not record" where I visit and should be trusted to ignore my internet history
They wouldn’t see what sites you give the tokens to — unless those sites choose to phone home, for some reason.
- You log in to the government site
- You ask for a token to prove your age/gender/whatever
- You copy the token
- You go to the age/gender-restricted site
- You provide the token
- The restricted site asks the government site how to verify any arbitrary token (but doesn’t mention your specific token)
- The restricted site verifies the token
-
Friendly reminder that some services do need your ID otherwise they cannot help you or at least they need to very you (accountants, notaries, etc)
edit: I can´t do your tax report if I 1 don´t identify you and 2 I don't have the social security for which I need to do the report
Iirc, it's so that only women can join the app.
-
Iirc, it's so that only women can join the app.
Which is not a good reason to upload photos of drivers licenses.
-
Remember the UK new safety law.
https://techcrunch.com/2025/07/15/reddit-rolls-out-age-verification-in-the-uk-to-comply-with-new-rules/Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan
“DRIVERS LICENSES AND FACE PICS! GET THE FUCK IN HERE BEFORE THEY SHUT IT DOWN!” the thread read before being deleted.
404 Media (www.404media.co)
Horrible practices by this app yes still can't help but feel anon seems to think he is a hacker for writing a python script to scrape a public database. Also scold app devs for not dealing with sensitive information carefully, release them in the most vile online platform possible so you can boast about your average python scripting skills?
-
Which is not a good reason to upload photos of drivers licenses.
Oh, agreed, it's just some gatekeeping process for sure.