If you're handing customer data to the developers, it's basically already leaked. Most companies limit who can examine things and get customer sign off first.
Let me reiterate: unless you're doing purely internal tooling, everything about how the software you're making should look and work is essentially sensitive customer data.
