Because NextPills operates entirely offline without remote servers or cloud accounts, the attack surface is strictly limited to local device security.

If you discover a security vulnerability or potential data leakage issue:

1. Please report it privately to devkantkumar.com or open a private security advisory on GitHub.
2. Provide a clear description and steps to reproduce.
3. We will investigate and release a patched version promptly.