By design, their database is basically public. It's just a merkle tree full of hashes, no interesting PII in there. I think at the moment it's running in a more centralized mode where touching the tree is non-trivial, but they are assuming it will eventually be public knowledge.