The cynical part of me feels like certain employees had uncontrolled access to the user data.

There would be a morbid irony in the idea of a tool marketed as increasing safety for women actually being a honeypot operation to accumulate very sensitive personal information on those very women.

Honestly it doesn't matter that they didn't have that additional nefarious intent their incompetence and carelessness drove to the same result.