One APK, 91 Gyms' Keys, and a Backend That Never Asked Who I Was
I downloaded one gym app and walked away holding 90 other gyms' backend keys. Then the server behind it started handing out admin sessions and member records to anyone who knew a number. A story about white-label apps going brrr.

