What happens when your top-downloaded photo app is in the crosshairs of British tabloids and an army of online conspiracy theorists?

To many photo app developers this story, featuring an app that grabbed the #1 overall Google Play and App Store spots in the US, the UK and many other countries just a few weeks ago, might sound like a luxury problem they’d love to have.

But they’re wrong, according to the photo app developer in question, Victor Sazhin, past presenter at Visual 1st. This story has been and is still a nightmare for him and his team. But it’s also a nightmare that has taught them important lessons and spurred them to fight back.

Let me walk you through the highlights of what all happened in just the last few weeks.

Intro: The app – NewProfilePic

Soft-launched in April, NewProfilePic is an app that adds creative effects that turn your selfie into a social media profile picture that “pops.” The app is promoted as “Always fresh. Totally AI-driven. The world around is ever changing and your online image should do too!” This relatively underserved use case (regularly updating your profile picture is not what most of us do) is addressed by an app that leverages advanced imaging technologies also deployed in the app’s sister apps, Photo Lab and ToonMe (combined, good for more than 300M downloads to date).

What happened when NewProfilePic added a new set of effects on May 6? Almost overnight, the app reached #1 overall positions in the app stores’ download rankings in many countries, including the US and the UK – a feat the almost 20-year-old company had never experienced before with any of its other apps.

1. The Is Russia after YOUR personal data? story

But, almost right away several online posts and user reviews appeared along the lines of “this app is malware and steals your bank accounts and personal data.” While these types of posts are not unusual for popular apps, British tabloid the Daily Mail ran with these posts and published on May 11 an article with the headline, “Is Russia after YOUR personal data? Experts warn internet users not to download latest online craze New Profile Pic that hoovers up your details.

A stylish picture of Vladimir Putin accompanying the story effectively rubbed in the message. The article stated that Linerock, the developer of NewProfilePic, had an office on the Moscow River near the Ministry of Defense, and implied affiliation with Russian authorities (the office in question was not the office of the company, but the office of the attorneys who had helped to register the company 20 years ago, according to Linerock).

Other tabloids followed suit, conspiracy posts exploded online, and “patriotic hackers” appeared to have used botnets to post repetitive messages in the reviews section of Linerock’s apps.

In the meantime, fact-checking authority Snopes had already debunked the various allegations ("There's little evidence to suggest that this app is any more invasive in its collection of user data than other apps") within 24 hours after the Daily Mail article broke, and was subsequently quoted by other factchecking sites, the Better Business Bureau and various publications.

But it didn’t help.