Hi @IT Guy,
good catch. In fact this is not a suggestion but a real must-not-happen bug. I just fixed the issue and uploaded Tims Chat 3.0.6 to my package server and the plugin store. It should be available there soon as well.
At this point I must deeply apologize for my really sub par actioning speed on this issue. This must not happen for such privacy violating bugs.
Thanks for the fix. I deployed some hotfix of my own in our forum (by simply changing the attribute there), so it was not time critical, but of course, a clean solution is always preferable. We'll update as soon as possible.