Accounts use Supabase Auth. Each customer only sees their own homes, systems and alerts (Postgres row-level security).