Scary email from Google Firebase (Client access to your Cloud Firestore database expiring in 4 day(s))

I have an iPhone app that was created in Xcode that downloads some data from Google Firebase (Firestore). Today I got a scary email from Google Firebase (as seen on the screenshot below). I'm not an expert on Google Firebase and honestly don't understand what this means.

Two questions:

  1. Does this mean our database is publicly available on the surface web (so for example search engines can crawl/index it)?
  2. What do I do about this?

Extremely thankful for any help!

Replies

Check the security rules of your project. If you are using the default security rules that are created by firebase when you start your project, that might be expiring. You can either modify the expiration date in the rule ( Not recommended) or create some basic security rules like match /{document=**} { allow read, write: if request.auth != null; }