Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

If a dating app appears to have disclosed your photos, location, messages, profile details, or other personal information without your permission, preserve evidence first, then contact the app in writing through its privacy or complaints channel. Ask exactly what was shared, who received it, why it was disclosed, and what the company will do to stop further sharing or correct and delete data where the law allows. Your rights depend on your country or state, the data involved, the app’s published promises, and the legal basis it relies on; lack of consent alone does not automatically prove that a disclosure was unlawful.

1. Protect yourself and preserve evidence immediately

Act first if there is a safety threat

If the disclosure could enable stalking, blackmail, harassment, identity theft, or an immediate physical danger, use the app’s safety tools and contact local emergency or specialist support services as appropriate. A routine privacy complaint is not enough for an active threat. Avoid contacting a person who may be targeting you if doing so could increase the risk.

Create a private evidence file

Save the information before it disappears or the service changes its page. Keep an offline copy as well as a secure digital folder containing:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Screenshots of the disclosure, including the full screen, account name, date, and surrounding context.
  • The URL, message, notification, email, or post where you saw the information.
  • The relevant privacy notice, terms, consent screens, and account-setting pages as they appeared when you used the service.
  • Dates and times: when you gave the information, when you noticed the disclosure, and when you contacted the company.
  • Copies of every request, reply, ticket number, and attachment.

Do not forward intimate images or other sensitive material merely to prove the problem. Record where it appeared and preserve a limited screenshot if necessary, but avoid creating more copies or sending the exposed data to people who do not need it.

#1 Best Overall
Sale
TP-Link ER605, Wired Gigabit VPN Router | Up to 3 WAN Ethernet Ports + 1 USB WAN, SPI Firewall SMB Router, Omada SDN Integrated, Load Balance, Lightning Protection
  • 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
  • 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
  • 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
  • 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
  • Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q

Secure the account and related accounts

Change any password that was reused on the dating app or exposed through it. Use a unique, long password and enable multi-factor authentication if the service offers it. Review active sessions, connected apps, recovery addresses, and phone numbers; sign out devices you do not recognize. Update the dating app and the operating system. If the dating account may have been taken over, secure the associated email account first, because an attacker who controls email can often reset the dating-app password.

2. Establish what the app said it would do

Read the privacy notice, not just the marketing page

Look for the sections describing data categories, purposes, recipient types, advertising or analytics partners, retention, international transfers, user controls, and the privacy or complaints contact. Note whether the notice distinguishes public profile information from private messages, precise location, photographs, identity documents, device identifiers, or inferred information. The Federal Trade Commission advises consumers to compare privacy protections and check what an app says about sharing and why it shares information.

Write down the exact wording that matters. A promise such as “we share your personal information only as described in this policy or after giving you an opportunity to opt out” is the company’s specific representation, not a universal legal rule. Compare that promise with the event you observed: an undisclosed recipient, a purpose not listed, a setting that was difficult to find, or sharing that continued after an opt-out.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Separate account closure, deactivation, and erasure

Deleting the app from your phone normally does not delete server-side records. Deactivation may hide a profile while retaining information; closing an account may trigger a retention period; and an erasure request may have exceptions for security, fraud prevention, legal claims, or regulatory records. Before leaving the service, save the evidence and correspondence you need. Then ask the company to explain separately what each of these actions does and what remains afterward.

Rank #2
GL.iNet GL-SFT1200 Opal Travel Router, AC1200 Dual-Band Wi-Fi | AC1200 dual-band Wi-Fi, 3 gigabit ports, OpenWrt with OpenVPN and WireGuard, 30+ VPN services, pocket 145g
  • 【AC1200 Dual-band Wireless Router】Simultaneous dual-band with wireless speed up to 300 Mbps (2.4GHz) + 867 Mbps (5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band.*Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
  • 【Easy Setup】Please refer to the User Manual and the Unboxing & Setup video guide on Amazon for detailed setup instructions and methods for connecting to the Internet.
  • 【Pocket-friendly】Lightweight design(145g) which designed for your next trip or adventure. Alongside its portable, compact design makes it easy to take with you on the go.
  • 【Full Gigabit Ports】Gigabit Wireless Internet Router with 2 Gigabit LAN ports and 1 Gigabit WAN ports, ideal for lots of internet plan and allow you to connect your wired devices directly.
  • 【Keep your Internet Safe】IPv6 supported. OpenVPN & WireGuard pre-installed, compatible with 30+ VPN service providers. Cloudflare encryption supported to protect the privacy.

3. Send a precise written request to the company

Use the privacy, data-protection, or complaints address in the app’s notice. A support-chat conversation can be useful, but follow it with an email or web-form submission that creates a dated record. Keep the request factual and concise. State what you believe was shared, when you learned of it, and why it appears inconsistent with the notice, your settings, or a promise made to you.

Questions worth asking

  1. What exact personal-data fields were disclosed, including any images, location data, messages, identifiers, or inferences?
  2. On what date or date range did the disclosure occur, and is sharing still happening?
  3. Which recipients received the information? Ask for named recipients where the law requires or permits that disclosure, and otherwise ask for the most specific recipient categories available.
  4. For what purpose was each disclosure made?
  5. What legal basis or other authorization does the company rely on, and where was that basis explained to you?
  6. Can the company stop further sharing, notify recipients, correct inaccurate information, or remove copies?
  7. What access, objection, deletion, or restriction options apply to your account, and what exceptions or retention periods limit them?
  8. Was there a security incident or unauthorized account access, and what steps has the company taken?

Ask for a written response and retain the original message. Do not state as fact that a crime occurred or threaten a regulator before giving the company a reasonable opportunity to investigate; a clear factual record is more useful if you later escalate.

A short request template

Subject: Request about disclosure of my personal data

I believe the service disclosed [describe the data] to [recipient or where it appeared] on or about [date]. I learned this on [date]. This appears unexpected because [quote or describe the relevant notice, setting, or promise].

Please investigate and tell me:
1. What data was disclosed and when;
2. The recipients and purpose;
3. The legal basis or other authorization relied on;
4. Whether further sharing can be stopped and recipients notified; and
5. How I can exercise applicable access, objection, correction, restriction, or deletion rights.

Please confirm receipt and reply in writing.

4. Use the rights available where you live

United Kingdom

A subject access request can seek a copy of your personal data and supplementary details, including processing purposes, data categories, specific recipients where available, retention criteria, and the source of information not obtained directly from you. Make the request to the organization identified in its privacy notice and keep proof of submission.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The UK right to object applies in particular circumstances and does not automatically erase every record. An objection, an access request, and a complaint are different processes. The Information Commissioner’s Office (ICO) says complaints may concern unexpected uses, security concerns, or how rights requests were handled. Its guidance recommends allowing the organization to complete its own process first; the public complaint page is being reviewed following legislative changes under the Data (Use and Access) Act.

Rank #3
Sale
ASUS RT-AX1800S Dual Band WiFi 6 Extendable Router, Subscription-Free Network Security, Parental Control, Built-in VPN, AiMesh Compatible, Gaming & Streaming, Smart Home
  • New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
  • Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
  • Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
  • 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
  • Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.

United States

Deletion and other consumer-privacy rights depend on state law, the type of business, and the data involved. Some state laws provide access, correction, deletion, opt-out, or appeal mechanisms with exceptions; others may not cover the service or your circumstances. Follow the app’s stated request method and check the law of your state rather than assuming a nationwide right to erasure.

You can report suspected deceptive privacy promises or other bad business practices to the Federal Trade Commission at ReportFraud.ftc.gov. An FTC report can inform enforcement but is not a substitute for a private lawsuit, legal advice, or a remedy guaranteed to an individual.

Other countries and regions

Identify the data-protection authority for your residence or the place where the service is established. The authority may provide access, correction, objection, deletion, portability, or complaint procedures, but deadlines, identity checks, exemptions, and cross-border rules differ. State your location in the first message so the company can route the request correctly.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Escalate when the response is inadequate

Build a regulator-ready record

Escalation is stronger when you can show the original evidence, the relevant policy language, your written questions, the company’s response, and the specific remedy still missing. Explain the practical harm without exaggeration: exposure of precise location, publication of an intimate image, unwanted contact, financial loss, or inability to exercise a stated right. Redact unrelated people’s information before uploading documents to a regulator.

Rank #4
Sale
GL.iNet GL-BE3600 Slate 7 Wi-Fi 7 Travel Router Touchscreen 2.5G | Touchscreen toggles VPN or AdGuard, 1-inch mini size, ideal for hotel, cruise, RV, business trip, plane connectivity
  • 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
  • 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
  • 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
  • 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
  • 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.

For UK matters, complain to the ICO after the organization has had a fair chance to address the issue. Elsewhere, use the privacy regulator or consumer-protection authority with jurisdiction over the company or your residence. Check the authority’s current submission requirements because procedures and statutory deadlines can change.

When the company denies any disclosure

Ask it to identify the records and recipient categories it checked, the relevant time period, and whether it is denying the event or merely saying the sharing was permitted. Compare that explanation with your saved screenshots and settings. A denial does not by itself resolve whether the notice was clear, whether an opt-out worked, or whether the company retained information after closure.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

6. Use the special removal process for intimate images in the United States

The Take It Down Act creates a rapid route for qualifying intimate images, including real and digitally forged images, on covered platforms. For a valid request, the platform must remove the reported material and known identical copies within 48 hours. The Federal Trade Commission directs people to TakeItDown.ftc.gov to report a covered platform’s noncompliance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

This process is narrower than a general personal-data complaint. It applies only to covered platforms and qualifying intimate imagery. The FTC guidance says that people filing a request do not need to report duplicate images separately. Preserve the location and evidence, submit the required details through the dedicated process, and avoid uploading extra copies or sharing the image while seeking removal.

Best Value
Sale
TP-Link Dual-Band AX3000 Wi-Fi 6 Wireless Gigabit Internet Router for Home | EasyMesh, VPN Clients & Server, HomeShield, OFDMA, MU-MIMO, USB 3.0, Secure by Design - Archer AX55
  • Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
  • A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
  • Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
  • Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
  • Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.

7. Decide whether to keep the account

You can pursue a complaint without immediately deleting the account. Keeping it active may preserve access to messages, settings, or an export you need as evidence; it may also increase exposure if the account is compromised. If you leave, first save records, download information the service makes available, remove unnecessary profile details, revoke connected-app access, and then follow the service’s documented deactivation and erasure procedures.

When comparing another service, evaluate the controls rather than relying on a privacy label:

What to compare Questions to ask
Notice clarity Does it identify data categories, purposes, retention, and recipient types in plain language?
Third-party sharing controls Can you opt out of advertising, analytics, or other disclosures without disabling essential safety features?
Closure and deletion Does the service explain what deactivation, closure, and erasure each remove, and what it retains?
Security and recovery Are multi-factor authentication, active-session review, password reset, and account-recovery controls available?
Complaint handling Is there a reachable privacy contact with a ticket or written-response process?
Image and safety reporting Can you report impersonation, intimate imagery, threats, and urgent safety issues through dedicated channels?

8. What official enforcement examples do—and do not—show

FTC action announced in March 2026

The FTC announced action against OkCupid and Match Group Americas, alleging that OkCupid shared user photos, location information, and other personal data with an unrelated third party contrary to privacy promises. The announcement described allegations and a proposed settlement process. It does not establish that every dating app, or every disclosure without consent, violates the law. The agency’s Director of the Bureau of Consumer Protection, Christopher Mufarrige, said: “The FTC enforces the privacy promises that companies make.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ashley Madison settlement history

In a 2016 enforcement matter, the FTC said Ashley Madison promised a paid “Full Delete” but retained personal information for up to 12 months and sometimes failed to remove profiles. That example shows why you should save the exact deletion promise and ask what account closure actually accomplishes. It is not a general retention period for current dating services.

9. Common mistakes and how to avoid them

  • Assuming “no consent” settles the legal question: consent may not be the only legal basis; examine the notice, purpose, settings, and applicable law.
  • Deleting the app before documenting the event: preserve screenshots, policy text, URLs, and dates first.
  • Sending sensitive material widely: provide only what the company or regulator needs and redact unrelated information.
  • Demanding an absolute deletion: ask what can be erased and which legal or security exceptions apply.
  • Treating a support reply as a complete investigation: request the data fields, recipients, purpose, and continuing-sharing status in writing.
  • Using the wrong authority: select the privacy or consumer regulator that covers your location and the company’s activity.

10. A practical checklist

  • Record the disclosure, source, dates, URLs, and policy wording.
  • Secure reused passwords, sessions, connected apps, email, and recovery methods.
  • Contact the app’s privacy or complaints channel in writing.
  • Request the data involved, recipients, purpose, legal basis, stopping measures, and available rights.
  • Use an access, objection, correction, restriction, or deletion process that applies in your jurisdiction.
  • Escalate to the appropriate regulator if the company’s process fails.
  • For qualifying US intimate-image cases, use the Take It Down route and the 48-hour removal rule for covered platforms.
  • Preserve records before deactivating or closing the account.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.