Parse makes an effort to get security right. You don't use your private API keys in the client. Instead, there is an access key specific to the mobile client, a

Parse makes an effort to get security right. You don't use your private API keys in the client. Instead, there is an access key specific to the mobile client, and its access is restricted in several ways. See https://parse.com/docs/data#security https://parse.com/docs/data#security for more details.