Please use our official HackerOne bug bounty program to report any security issues: https://hackerone.com/ecobee.