Folders and thumbnails from private folder showing in all users

 User 1 is using WDMycloud on an android phone - can see their own private folder and the public folder.  All the photos are in the shared folder.  All the private documents are in User 1 folder.

Using which app, or which means to ‘see’ the folders?

When using the app, User 1 can go to ‘Public’ and see the public photos, but:

Which app?

Is either user 1 or user 2 the device admin?

Were the user accounts and permissions set up correctly before photos were loaded onto the device? I wonder if the thumbnails were created with old permissions. I’d hope they would update when permissions were changed, but…

Have you enabled media serving on the private folders?  DLNA media serving ignores folder permissions. If user 2 is using a DLNA  client, they would be able to see any photos in shares with media serving enabled.

Rebuilding the the DLNA media database has nothing to do with thumbnails that are created for use by the WD mobile, desktop and photos apps; there are no user controls in the Dashboard for the thumbnail process that I am aware of. The thumbnailing process can be stopped, the thumbnails deleted, and the thumbnailing process restarted. See this thread.