Please report security problems privately via GitHub's private vulnerability reporting rather than in a public issue.

Logsift runs on your computer and only reads the files you open. It makes two kinds of network connections: SFTP connections to servers you choose, and one anonymous check for new releases on GitHub (Help → Check for Updates Automatically turns it off).