Row-level security in Postgres scopes every table to your business, and the application connects with a role that cannot bypass it. A query that forgets its filter returns nothing — not somebody else's data.
We never store a password
Sign-in goes through Google, Microsoft, or a managed email login. Centrafeed has no password column and no credential-handling code, so there is none to leak.