Is it easy for people to find "public" google sheets/docs?

Context: Storing some semi-sensitive data (individual user info, of non-sensitive nature) for an app beta-test in google sheets. Planning to migrate to some DB in the future, but for now, just using JavaScript to pull the data directly from the google sheets (since there are visualizations being dynamically updated by the sheets).

CodePudding user response：

Yes, it's easy to get information. Search engines may index and cache the information. Then, there are bots, crawlers and scrapers. Do NOT put (semi)sensitive information in public. Implement

Afterwards, you may select a role for those users and then they can be notified afterwards through email.

On the other hand, you can share the link to others. A prompt will show like the one below if you send the url through Google Chat:

You may opt to select Don't give access which will result in the following view on the other user's end:

This would mean that if unauthorized users get hold of the file URL, they will still need to send an access request. If other users submit the request, an email notification will be sent to your mail inbox. Other users who also own the file will also be notified by mail.

• Your Organization - If you use a Google Account through work or school, anyone signed in to an account in your organization can open the file. If you are an administrator in a work or school workspace, you may set how members can share content within the organization. The administrator can prevent the sharing of content with group members outside your organization. If external sharing is prohibited, only group members who are in your organization can access the group's shared content.
• Anyone with the link - Anyone who has the link can use your file, without signing in to their Google Account. This option is least recommended because if the URL is leaked to unauthorized users, they can easily access the file.

References:

• Share files from Google Drive
• Share content with a group

CodePudding user response：

Don’t make it public unless you want the public to see it. Use oauth to access.