diff --git a/src/controllers/dataexport.js b/src/controllers/dataexport.js
index 65a7554ab6..6e5f6703b2 100644
--- a/src/controllers/dataexport.js
+++ b/src/controllers/dataexport.js
@@ -31,7 +31,10 @@ dataexport.history = function(req, res) {
 }
 
 var userdata = function(user) {
-  //may eventually need to do some parsing here to eliminate/add from/to the object, just return user for now
+  if(user.auth && user.auth.local) {
+    delete user.auth.local.salt;
+    delete user.auth.local.hashed_password;
+  }
   return user;
 }