Private proof-of-vaccination app may have exposed hundreds of thousands of users’ personal data CBC.ca