Hacker News

Favorites Setup
Comment by jacquesm | original | Lovable apps expose passport details and more than 200K private messages
[−]jacquesm · 2026-11-15 Sun 00:17 UTC · link
Yes. Lovable is pretty much untouchable for serious businesses going forward until they clean up this mess. And even then.
[−]throwaway27448 · 2026-11-15 Sun 05:19 UTC · link
I'm more worried about the people who may not realize how risky this is.
[−]jacquesm · 2026-11-15 Sun 07:33 UTC · link
Lovable more-or-less presents itself as 'Wordpress for applications'. That comes with a whole pile of responsibilities and a large chunk of their customers may think they are doing a good thing by picking them instead of hiring a dev team.

"Build something Lovable

Bring a new product, internal tool, or entire company to life."

You can't market like that without having the back-end rock solid. There isn't a word about risk or responsibility there, but there are plenty of disclaimers of responsibility in their terms of service and the CISO (active in this thread) does not inspire confidence.