Sadly they followed the path of nearly every surveillance capitalism startup out there.

1. Breach user trust by acting without user consent. 2. Market it as a service. 3. Eventually get caught. 4. Offer an apology.

Rinse, Repeat.

I don't have any real complaints about the steps they took to correct this. I have complaints about the fact that they did it in the first place and didn't consider the users. I also take offense at their investors who continued to invest while knowing this was going on.