The bug is fixed, but privacy concerns remain.