I agree. Please don't send any private keys off the client machine. Regardless of it being just the memo key, it's never a good idea. Also, check the key validity before making a call to your backend. You're exposing your backend to attacks with this. Good job on getting this up though.