If you discover a security vulnerability, please report it responsibly:

1. Do NOT open a public GitHub issue
2. Email us at: security@meditrack.com (or your preferred contact)
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

We will respond within 48 hours and work with you to resolve the issue.

When contributing:

• Never commit secrets, API keys, or credentials
• Use environment variables for sensitive data
• Keep dependencies updated
• Follow secure coding guidelines