Assume the card is public
If a card can be opened from a QR code or shared link, treat it as public. Do not add anything that should only be seen by employees, patients, customers, or internal teams.
This is especially important for doctors, restaurants, real estate teams, and sales teams that may handle sensitive customer information.
Review forms and links
Forms should ask only what is needed for first follow-up. Do not collect sensitive details unless the workflow truly requires them and you can handle them safely.
External links should point to active, trustworthy pages. Broken links and misleading offers reduce trust quickly.