I’ve always done it on the app, no phone call or chat. But regardless, it’s not like it’s going to happen. I have my cc info (and throwaway cards like privacy.com) in several websites and nothing like this ever happened. All times I’ve requested a refund was due to the service/product not being what was promised, not due to a data leak. The convenience definitely beats the risk.