Access to Projects

I'm working on a project that has not been release yet. I just added Firebase Authentication to it and its working fine.

In Firebase which I just signed up and created, I noticed that a user has already created an account in Firebase as if they had access to the App, so I'm wondering if someone got the to project code, or ???

I'm also checking on the Firebase side to see what else I can do to secure my info...

Any suggestions would be greatly appreciated. Are there logs on who accessed the project files....

How did you test FB authentication? A user would needed for that!

Installed the App on my phone and logged in, so I'm the first User. I was testing the UI behavior and logged into FB multiple times, deleted my log in, etc... During that process, I noticed another account (email address) in there which I did not initiate from the App.

I followed this write-up: https://appinventor.mit.edu/explore/ai2/firebase

Thus my concern about ai2 access...

The other scenario can reside in my Firebase API key, which I'm looking into methods of securing...