Report vulnerabilities, or any way in which this howware could expose the owner's data, privately: in this repository, Security → Report a vulnerability.

Never include real personal data in a report, an issue or a pull request: describe the type of data and where it appeared, not its value.