I would rather say 'Never give your information to a startup that does not handle it responsibly'. Not every startup is irresponsible with data.

In this case you have a strong point. Good work finding the security issue and reporting it.