# Private Sign in, Limit Access by Email

**URL:** https://community.glideapps.com/t/private-sign-in-limit-access-by-email/19992
**Category:** Ask for Help
**Created:** [December 17, 2020, 2:54pm UTC](https://community.glideapps.com/t/private-sign-in-limit-access-by-email/19992 "2020-12-17T14:54:07Z")
**Posts on this page:** 1
**Showing post:** 35

<div class="post-metadata">

### Author: ![Jeff\_Hager](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jeff_hager/32/43_2.png) [@Jeff\_Hager](https://community.glideapps.com/u/Jeff_Hager)
#### Post date: [December 19, 2020, 1:32am UTC](https://community.glideapps.com/t/private-sign-in-limit-access-by-email/19992/35 "2020-12-19T01:32:26Z")

</div>

I’m not totally sure on that answer. I just go under the assumption that any data that is not behind row owners or a secure private login is susceptible to being snooped by a savvy user regardless if they can access that part of the app or not. I’m not sure at what level the database is cached on the user’s device, but I would assume that most, if not all, data is synced and downloaded to the device to provide speed and ease of use to the end user. Row owners prevent that download from happening for users that are not meant to see that data. Like you said security through obscurity is not security at all.

Case in point is the recent post where a fellow app builder was notified by an anonymous user that all user data was accessible through various techniques, even though it was not technically visible in the app ui.

> [@How can I protect my app’s user profiles?](https://community.glideapps.com/t/how-can-i-protect-my-app-s-user-profiles/19980):
>
> A random person online has downloaded my full user database right after receiving access to my app. He sent me the list of my users in a txt file - I was literally shocked. Thank God it doesn’t seem to appear “ransomware” but more of a lead gen tactic - he wants to sell me cyber security services. After a bit of research and chatting with a technical friend, he told me that he might have performed UserEnum tactics to reverse engineer all my sign-ups. He has also told me that this issue could…

---

_[View the full topic](https://community.glideapps.com/t/private-sign-in-limit-access-by-email/19992)._
