The refurbishment process >should< include wiping the card. I'm surprised that the card wasn't swapped during the replacement. Unless you specifically put personal data on the card, for the most part all they'll get are any pictures you took. I doubt you have much if any security issues. Still a lesson learned, always wipe everything (I do several times) before returning any gadget with on board storage.