Responsible disclosure

Last updated: 20 October 2026

Vear handles health data, so we take security seriously. If you find a vulnerability in any Earlab or Vear system, we want to hear about it and we will work with you to fix it.

How to report

Email security@earlab.co. Please include:

• what you found and where (URL, app or device);
• the steps to reproduce it;
• how we can reach you.

We ask you to

• not access, change or delete data beyond what is needed to show the issue;
• never use personal or health data you encounter, and delete it after reporting;
• not share the issue with others until we have fixed it;
• not use social engineering, physical attacks, denial of service or automated scanning that degrades our services.

What we do

• We confirm receipt within three working days.
• We keep you informed about our progress and aim to resolve issues as quickly as possible.
• We will not take legal action against you if you follow these rules.
• With your permission, we credit you once the issue is fixed.