Is Trustify's Ashley Madison app exploitative? - DC


Aug. 25, 2015 12:35 pm

Is Trustify’s Ashley Madison app exploitative?

The Georgetown company is catching flack for contacting people who've been outed by its web tool.

Your secret is no longer safe.

(Screenshot via

Danny Boice’s new private investigator app was launched in March of this year, just in time to ride the wave of paranoia and suspicion unleashed by the Ashley Madison hack.

Last week, after the so-called “Impact Team” of hackers released a first set of data identifying users of the cheating website, Georgetown-based Trustify made a tool that allows anyone to check whether an email address was contained in the leak.

But now, the company is being excoriated — on Reddit, Twitter and elsewhere — about its follow-up strategy.

In a blog post, Troy Hunt, a Microsoft developer who made a similar, though more privacy-minded toolsummarizes these criticisms.

First, the Trustify app allows users to check the status of other people’s emails. In fact, in an earlier version the app specifically called for entering “your email address (or the email address of your spouse).”

In fact, it encourages users to spread the word on social media through boilerplate messages, whether it be good news:

(Screenshot via

(Screenshot via

Or muckraking gossip:


Social media reports show that Trustify had reached out to the email addresses of people who were outed by the leak for apparent marketing purposes and without an advance warning to users who’d punched them in:

Director of Content Marketing Elliot Volkman said in an email to DC that Trustify had put an end to the practice: “The email alerts that were rubbing some people the wrong way have also been fully discontinued.”

Volkman responded to various angry posts online (including in a now empty Reddit AMA), but recently deleted the messages and made his social media accounts private after receiving death threats.

In an email, founder and CEO Boice explained that the email blasts were vestiges from an earlier version of the app, which informed only the verified users of email accounts of their status in the leak:

The “spam” in question was coming from a tool that we released for our users to check to see if they were personally named in the leak. We emailed a report to the email address they used to check. People started using the tool to check their friends and spouses email addresses (not as tool was intended) and those email addresses got an email.

Boice added that Trustify is now deleting all the emails addresses that have been run through the app.

“We are not using them for anything,” he said.

Organizations: Trustify
Already a member? Sign in here


Stardog selected by City of San Francisco for Startup in Residence program

Vinetta Project DC’s 2019 Venture Challenge is accepting applications

LifeFuels closed Series A funding before heading to CES this week



Online coding bootcamp Thinkful is offering readers $600 off courses

Washington, DC


Infrastructure Engineer (DC, SF, NYC)

Apply Now


Experienced Software Engineer – Backend

Apply Now

Data Coalition founder Hudson Hollister launches consulting firm for data companies

Babyscripts raises $6M in new investment round, led by Philips

These two companies are partnering to make it easier to gift medical transportation



Join our Match beta, an opt-in alternative to recruiting

Sign-up for daily news updates from Dc

Do NOT follow this link or you will be banned from the site!