Also when using the wix-data library to get/update data you can make your calls with the suppressAuth option which will skip permission checks. If you combine this with HMAC you’ll have a secure way to share data between sites/apps without opening it up to 3rd parties.
Example here: https://www.wix.com/velo/reference/wix-data/get