Our of curiosity, does AngelList have a chief privacy officer, or even a privacy manager or subject matter expert embedded with the engineers? (Until this moment I wasn't familiar with the service - I mostly get jobs through friends and former coworkers.)

I understand some companies are not large enough to have a dedicated privacy professional, but as someone who knows quite a bit about it, it's really frustrating when the response to something like this is "whoops! here are the steps we are taking to correct this".

Don't get me wrong Dave: This is a great response and you sound like you truly want to avoid incidents in the futures. Kudos for that - many companies would simply quote their privacy policy and offer up a feeble "Sorry you're sorry."

But this is more than a one time bug to be quashed. IMHO all companies (even small startups) should endeavor to move beyond reactive solutions like this, and put processes and controls in place so that these incidents never happen to begin with.

If you or anyone reading this is on the fence, think of it as marketing. Marketing in the sense of providing a quality product that fulfills a need, and makes other people want to buy your product because it's solid and good.