I noticed this error when I read your post Wei Hong. The problem exist and I think that it is breach of the users' privacy. For instance at registration users are required to enter their email addresses but they have the option to make it public or not publish email.jpg . If the user chose not to make it public others who scan the QR Code can still view the email address that was made private. I think this is a breach of their privacy.