App should notify about pwned service on first run
I suggest, when this app will be run for first time, it will show window, similarly to how WhatIP does: https://gitlab.gnome.org/GabMus/whatip
It uses this 3rd party services to collect data about ip adress, and you can click "Yes" and it will, and no for "Do not collect". It also tells you what does it even mean and what will happens when you answer yes. And it also tells you, that you can change this setting in settings menu. Password should do same for pwned, because not that much people knows about it and what it does, and app doesn't do that good job in explaining it.