I saw this unfold on infosec twitter, the CEO really dropped the ball on handling this incident professionally.

The security researcher did nothing wrong here [IMHO], they tried to report a security flaw in the app. CEO got pissed, took it as a attack personally instead of thinking of the responsibility of users safety on the app. (All the while promoting her app as a safe place for users to share sensitive information.[i.e. photos, DOB, address, phone number, GPS location).

Sad to see this type of response; the CEO has a lot to learn from this situation about security for users and how to deal with security researchers.

Live n learn...