Thank you for the heads up, I just uninstalled that app. I had it from 1 or 2 years ago and havent used it since.

I feel like I'm being proven right that when selecting software, it should be open source and hosted on-site.

Even if this causes problems, the alternative seems riskier.

What are you talking about? CyberArk is enterprise privileged access management. It’s not an app you install and forget about for 1-2 years. It’s certainly not something you just uninstall because you found out very basic information about the vendor on HN, because you almost assuredly run it because auditors require you to, and uninstalling it without a like replacement would be an extremely bad idea.

Do you doubt that he never ever installed the thing? But it makes him feel important or something so let it be.

To that point is there an open source PIM you'd recommend?