Someone at BrowserStack is Leaking Users' Email Address

Like all good nerds, I generate a unique email address for every service I sign up to. This has several advantages - it allows me to see if a message is legitimately from a service, if a service is hacked the hackers can't go credential stuffing, and I instantly know who leaked my address. A few weeks ago I signed up for BrowserStack as I wanted to join their Open Source programme. I had a few…

Terence Eden’s Blog

Everyone in this thread suggesting a “data leak” or “compromise” is totally missing the fact that this is how Apollo works. This is often times overlooked by Apollo customers themselves. You have to opt out of customer data sharing (and in doing so lose out on the value of the product): https://knowledge.apollo.io/hc/en-us/articles/20727684184589...

Not commenting on whether this is good or ethical (or even totally legal), but this is what is happening behind the scenes.

How Data Sharing Works with Apollo's Living Contributor Network

Overview Data is the bread and butter of business at Apollo. As a result, Apollo takes data privacy and compliance very seriously and strives to be fully transparent about how it sources, collects,...

Apollo

For a little more color for people unfamiliar with modern sales/marketing:

1. A user signs up to BrowserStack

2. BrowserStack (automatically) upload the submitted user’s information to Apollo

3. Apollo “enrich” the user’s details using information they already have about the person, e.g: company revenue, LinkedIn profile

4. Sales reps at BrowserStack use the enriched information to identify leads, bucket for marketing etc.

Apollo’s customer data sharing adds any information BrowserStack send to Apollo to the person’s profile with Apollo, accessible to all Apollo customers.

For example, any other Apollo customer can search something like “email addresses for decision makers at Example, Inc.” and get back a list including your email address (if you told BrowserStack you are a decision maker at Example, Inc.)

Every single marketing team is doing all of this, the only reason it was obvious in this case is that the OP used a unique email address for BrowserStack. If you sign up for any business product online, you surely have a profile in Apollo filled with details about you gathered from around the web (and details you submitted).

edit: https://www.apollo.io/privacy-policy/remove opt out link but Apollo are just one of many companies offering this service

Remove your information

Search, engage, and convert over 210 million contacts at over 35 million companies with Apollo's sales intelligence and engagement platform.

Hopefully in the soon future:

5. BrowserStack gets hit by a massive GDPR fine.

6. BrowserStack contests the fine for a couple of years, not paying a euro cent

7. People just remember 'BrowserStack got hit by a massive fine'

8. Everyone carries on with business as usual