How can the customer know?

Bad take. That's impossible in our society. I wouldn't get updates from my child's kindergarten. I wouldn't be able to use public transit. I can't access my bank. I can't communicate with my family, friends, spouse, work network.

We don't have an option. Which is why a lack of care for users is abhorrent.

Keeping _more_ of your data private is not impossible. It won't necessarily be the most comfortable thing, as tradeoffs will be made, but you can claw back quite a bit of privacy if that is important to you.

Of course, but that's not what the person I was responding to said. They blamed people for trusting services (many of which) they don't have an option to opt out of.

And this whole thread is just proving my point by blaming people and customers for the mistakes of technology companies.

Lovable is not the same as using your bank account or your health insurance. You create a website and put it on the internet and maybe even host sensitive data and information. This should only be done if you know what you are doing and if that’s not the case and you haven’t read the terms of service it’s mostly your fault that you trust any company on the web especially those coked out VC backed startups.

If there are passports in these dumps, Lovable is obviously being used for sites that _are_ as serious as your bank account or health insurance. That's exactly the problem birdsong's bringing up in this thread.

If it were only used for prototypes and blogs, who cares. But it's being used by _real businesses_ that don't give a shit about security.

I specifically chose banks and health insurances specifically because you can not get around using their websites and online services in your daily life.

For all other services: is it really necessary to give them your passport info on the internet ?

Customers are absolutely without blame here. They have no way of knowing which parties are and which parties are not running a tight ship. Every e-commerce store already handles your private data, how will you ensure that across all of those each and every one is going to be careful with your data? I'm not the most active online shopper in our household by a long shot and yet I've had two reported breaches in the last year alone, one a specialty welding store, the other a store for home automation products. Now, both of these are 'niche' and probably don't have a security budget to match their responsibilities. Even so I would have expected some basic precautions and that trust seems to have been misplaced. I expect each and every website where I've ever filled out a form to be hacked sooner or later. Nobody seems to do anything about blast radius reduction, which would be trivial. But marketing wants to keep the last 20 years of purchases live so they can send out some more spam, when what they really should do is move those records to cold storage for tax compliance only the moment the package is delivered.