Public keys are revealed when an outgoing transaction happens from an address.

If you get incoming money into an address, then it's safe, and when you spend from that, you should send back the change to another address, that way the public keys are not exposed.