Emergency vet contact data (phone, address, map) was visible on the token-shared health card URL. Health data is owner-private; the health card is the single sharing exception but should not include internal emergency contact details. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>