Emails account password in plain text when registering
Upon registering for an account, which is required if you don't want to link with your Apple ID, I got an email thanking me for registering which included my password I setup in plain text.
This means at least two things:
1) they are storing the account password in plain text rather than hashing it with a secure one-way hash. This is terrible security. Amongst other things, it means that if teeter is ever breached, the attackers have everyone's full account credentials with zero effort.
2) My account information including name, email, and phone number (had I included it) and of course password are effectively compromised. Email is an insecure medium.
Had I not used a one-off password and instead been the sort of person who uses the same password for everything, I'd be in serious trouble.
There are no good technical reasons to store the password unhashed nor are there good reasons to send the password over email after registering. That's what password reset links are for.
This is a ridiculous security flaw that saves nothing in convenience.
Please fix this, Teeter.