We want to do something more concrete to guarantee user privacy going forward. A technical solution would be best. But short of that just a really strong, transparent commitment (that makes it easy to hold our feet to the fire if we screw it up again). But I could not get this together before the email today. I'm expecting to announce something in the next few weeks. I agree with people here when they say that actions are what really matter. I screwed up enough that I don't certainly don't think an apology alone makes it better.

> A technical solution would be best.

This is another error in your thinking.

You can't solve failures in human understanding with technical solutions.

Your first instinct is going to be too try to cite counterexamples - but that only proves the point.

You're in a business that deals with people. You can't eliminate that with technology, and the fact that you think you can try is what makes you dangerous.

> If we can take away anything from this, it's that Triplebyte actually ...

... have a decent crisis management or PR firm on retainer.

Which might be as much of a red flag as the initial fuckup...

> have a decent crisis management or PR firm on retainer.

On what basis do you say they have a firm on retainer?

I think many/most CEO's in this situation would make some calls to get advice on how to manage the situation -- I don't that is a red flag.

If they don't take strong, concrete steps to mitigate these kinds of problems in the future, I will have less confidence and trust in their company.