Personal productivity app for founder and small team: fix the exposure, keep the app.
The code suggested user data was protected, but the live app was still exposing it. I found database access rules to change – a simple fix. Given the scale and stakes, the remaining findings didn’t justify a rebuild. They could keep using the app with confidence after a small fix.