I specialize in healthcare PR and I want to know why you're trying to do us like that? No, thank you, ma'am.

But for real, they don't need a PR person. They need to take the website down and hire a regulatory lawyer and CTO who knows privacy. Then...after validating studies & undergoing whatever relevant regulatory process (& a name change), come out like "Calmera who? Malcera is totally responsible)