There should be a way to restrict which users and/or groups can access the mobile app.