This is trickier than it looks.
And it always was.
The company is legal, even if it's products are distasteful to many.
turn the problem on its head.
The app spies on innocent people.
It's compromised. Now not only does your creepy partner/ex/friend/boss have access to your data, so does any other bunch of bad guys. Flexispy is nasty but legal and HackerOne's stance initial stance should have been the one to retain.
Biting the hand that feeds IT
