Retail Apps Ship Database Secrets

Mobile apps for national retail and hospitality brands sometimes contain hardcoded credentials or easily‑discoverable secrets that give direct access to central customer databases. The Applebee’s case — where a database password in the app exposed names, DOBs, phone numbers, veteran status and IPs — shows how a simple development lapse can put millions of consumers at risk. — Widespread app secret leaks amplify privacy harms and argue for stronger regulatory minimums (secure secret management, logging requirements, mandatory breach audits) and consumer notice rules for large customer programs.