Reporting a security issue
Found a vulnerability in Hale or haleair.app? Email [email protected] with "Security" in the subject.
Tell us what you found, where, and the steps to reproduce it. Please don't include anyone else's personal data.
What's covered
- The Hale iPhone app and its widgets
- haleair.app
Hale has no servers of its own. The app talks to your AirGradient monitors on your Wi-Fi and, if you add a token, to AirGradient's API. Services we use but don't run, such as Apple, Cloudflare and AirGradient, have their own reporting programs.
What we ask
- Test only with your own monitors and your own devices.
- Don't run tests that degrade the site for other people, such as load or denial-of-service tests.
- Give us a reasonable chance to fix the issue before you share it publicly.
What happens next
A person reads every report. We'll confirm we've received it, keep you posted while we work on it, and tell you when it's fixed.