All published apps are available to anyone who knows the URL of the app.
Apps, by default, are private. You can mark an app as public by right clicking on the app name in the navigator on the builder tab. When you make an app public, it is available to be found without knowing the URL. Currently, the Directory section is the only function that displays public apps.
If you want the utmost protection, you can assign a password to an app.