Is your Firebase database still in test mode?

Your Firebase config ships in your frontend, and that's normal. Your security rules are what keep strangers out. Test mode rules let anyone read and write until a date, and some apps launch before anyone changes them.

Check (your own app only)

1. In the Firebase console, open the Rules tab for Firestore, Realtime Database and Storage.
2. Look for if true, ".read": true, or a request.time < date rule. Each one means open to everyone.

Fix it

1. Allow access only to signed-in owners, like allow read, write: if request.auth != null && request.auth.uid == userId;
2. Test your rules in the Rules Playground before you publish them.
3. Sign out and confirm you can't read anyone's data.

Run a free scan at sniffpup.com.

Named after Ember, my black Pomeranian. Built by a software engineer and vibe-coding hobbyist to help you ship safely.