Security/data protection

Hello, I am new, so pardon my ignorance. Is that correct that all user’s personal data (forms entries) is protected by WP admin user name and password only , so anyone with WP login has access to everything? The reason I am asking is because I want to outsource some forms development to someone I don’t know personally and I don’t feel comfortable with sharing the data as well. I would appreciate any suggestion. Thank you!

Out of the box only administrators can access the Forms area of the plugin to view the entries. You can use a role management plugin to enable access to specific features for other roles.