Yea, I see how this could be an issue when drive is used as a direct connect from the MPW signal to phone or pad, but for someone to connect to the MPW signal, they need the password you have set for the MPW wifi signal. You could be sitting next to someone who also has the Avia app and they could not see your drive’s data unless they also had the password to connect their device to your MPW wifi signal.
I have my MPW on my home network, so I can see and access the MPW, computer, and two other devices on my network that act as servers, too. No passport needed for any of these to access any device after connecting device to the home network – which has a password, of course.
So now, completely uninstall My Cloud from your devices and reboot device, then re-install and see if it works for you now. Otherwise the app likely does not work with your particular Android device. App works perfectly with the Apple products.