If the captive portal for an open network uses HTTP, then anyone nearby can see the information you submit.