I remember trying Hackpad when it first popped up here on HN. I signed in with my Google account and was surprised to find that it had pulled a photo of me to use as my avatar—a photo that I had never knowingly put online. Nothing bad, just a Christmas photo, but it was personal and not meant to be plastered on the web. Being privacy-conscious, I had always tried to keep photos of me off of the internet.<p>At this time there wasn't any way to change your profile picture through the web interface. I tried to get in touch but never received any replies. My face was stuck there on my profile, and there was nothing I could do about it.<p>Just checked and the picture was still there. There's a "Change profile picture" link now, but it seems to be broken: uploading a new picture does nothing. At least you can delete your account now, which I've done.<p>Hackpad is a great tool, and I wish them the best with the open source release, but this is the experience that has stuck in my mind. Don't pull photos from people's accounts without asking for permission, <i>especially</i> not for public display.<p>(I'm still not sure where the photo came from, as I could never find it on my Google account. I suspect some misconfigured Windows Phone privacy / contact syncing setting was the culprit.)