The article says that an incoming update is addressing this by giving people the option to delete local data, so it looks like this soon won’t be an issue.

But stepping back, it is not at all surprising to hear about this type of flaw. MOST startups have these kinds of flaws. They spend as little as possible on things like security or privacy. Enough to meet some checklist minimally but not enough to actually respect customers and their data. In some ways it is understandable since they have to do whatever they can to survive, and the chances of that are low to begin with - so saving their energy and time for other things is what happens.

I bet most customers would be frightened if they knew exactly how cavalier most startups truly are.