Private proof-of-vaccination app Portpass exposed personal information, including the driver’s licenses, of what could be as many as hundreds of thousands of users by leaving its website unsecured.