Neon call-recording app shuts down after data breach exposure
Neon, a popular call-recording app that paid users to sell their call data to AI companies, was shut down after TechCrunch discovered a critical security vulnerability that exposed user phone numbers, call recordings, transcripts, and earnings information to any authenticated user. The app's founder shut down the servers and cited the need for additional security measures without disclosing details of the breach.
What happened
Neon, a call-recording app that paid users to record phone calls and sell the data to AI companies, experienced a critical security flaw discovered by TechCrunch. The vulnerability allowed any logged-in user to access other users' data, including call recordings, transcripts, phone numbers of callers, call dates, and earnings information.
After being notified of the breach, founder Alex Keam shut down Neon's servers and notified users that the service was temporarily suspended to add security levels, without disclosing details of the data leak.
Reported impact
The Neon app had recorded 75,000 downloads in a single day before the shutdown. The data breach exposed sensitive user information including call recordings, transcripts, phone numbers, call details, and user earnings to any authenticated user.
Index analysis
TechCrunch's testing confirmed that the servers did not prevent any user from accessing other users' data. The security flaw was critical and exposed directly accessible audio files and transcripts.
Governance controls
The company did not disclose whether a security review was conducted before launch or whether any data was stolen. The company did not specify when or if the app would resume operations.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.