I hacked a dating app (and how not to treat a security researcher)

I had a similar experience with another dating app, although they never got back to me. When I tried to get the founders attention by changing his bio to contact me text, they restored a backup lol

years later I saw their instagram ad and tried to see if the issue still exists, and yes it did. Basically anyone with the knowledge of their API endpoints (which is easy to find using the app-proxy-server) you have full on admin capabilities and access to all messages, matching, etc.

I wonder if I should go back and try again... :-?

Why not disclose it as a responsible dev with contacts and move on.

If a company is not responsible enough to follow up on security reports you should not follow up, but instead disclose it to the world.