Client confidentiality
I'm not naming the practice, and I describe no visitor, household or consultation content.
The pattern worth taking away
I treat consumer-facing and operations-facing software for the same process as two products sharing a database. Treating the second one as "the admin screens" is how operational software ends up being the thing everybody complains about.