The iOS developer and security researcher duo Mysk claims that after deleting their 1Password account, their profile picture was still being stored and remained publicly accessible via a URL.
This came across my radar a few days ago and I think it’s a bit of a nothingburger. The long string in the URL is the authentication to access that image. It can’t be stored with the vault data because all the 1Password apps show an account chooser with this data when you’re logged out, and people would want to quickly pick out an account based on this.
This is pretty cringe though 
This is a problem I think a lot of software has, where they store all the things you upload in an S3 bucket and very rarely clean up outdated information, because storage is cheap and developers are lazy. This instance should definitely be fixed though 
Unfortunately, this is exactly the issue. 