TL;DR: Supabase carries a Risk Score of 100/100 (Severe) based on 13 documented complaints from BBB filings, lawsuits, Trustpilot, and Reddit — the public record reflects a serious pattern of issues you should know about before buying.
Supabase is an open-source backend-as-a-service platform providing a Postgres database, authentication, storage, and edge functions. Pricing includes a free tier with paid plans starting at $25/month per project, scaling with database size, bandwidth, and compute usage.
Editorial summary
Independent analysis · 13 sources reviewed
Should You Trust Supabase?
Supabase is a genuinely impressive product that has earned its reputation as the go-to Firebase alternative for developers who prefer SQL and want an open-source foundation. The database tooling is solid, the auth layer works well for most use cases, and the developer experience from project creation to first query is among the best in the space. That's not what this publication is here to tell you, though.
What the public record shows is a platform that has grown faster than its guardrails. The billing model isn't predatory by design, but it's opaque enough in practice that a meaningful number of developers are hitting surprise charges — particularly on egress and storage reads — that the pricing calculator doesn't make obvious. The free-tier pausing policy and the lack of backups on that tier aren't hidden, but they're not surfaced where they need to be: at project creation, in large type. The India blocking incident in February 2026 was a stark reminder that 'managed cloud' means your uptime is subject to factors your vendor can't fully control. And the 'open source' positioning, while technically defensible, creates an expectation of portability that doesn't survive contact with a real migration attempt.
The pattern here isn't malice — it's a startup scaling fast and leaving some rough edges around pricing transparency, default security configurations, and support capacity. For a solo developer or a funded team with engineering resources to work around the friction, Supabase is still a strong choice. For anyone shipping a production app in a regulated market, or anyone whose budget genuinely can't absorb a surprise monthly charge, the due diligence bar before committing should be higher than the slick landing page suggests.
Is Supabase Worth the Cost? Complaint Category Breakdown
Each complaint type is weighted differently in the Risk Score. Billing and marketing deception weigh heaviest.
Where these complaints come from
Complaints are sourced from public platforms spanning US, UK, and global consumers. Each report links back to its original source.
| Platform |
Reports |
Who's reporting |
| Reddit | 5 | US & global users |
| G2 | 3 | Global B2B buyers |
| Hacker News | 2 | Global tech users |
| News | 2 | Public media |
| Trustpilot | 1 | UK & global consumers |
What Buyers Say About Supabase
Documented pricing complaints, billing issues, and support failures — newest first.
Our AI scanner searches Reddit, Trustpilot, BBB, and news sources for fresh complaints from the past year, paraphrases what it finds, and adds anything new to this page. Takes up to 90 seconds.
Billing Problems
HIGH
Source: Reddit · Mar 14, 2025
Added 23d ago
Unpredictable Usage-Based Bills Shock Developers on Free and Pro Tiers
Supabase's usage-based pricing model has repeatedly caught developers off guard, with hobbyist projects suddenly accumulating charges for egress, storage reads, and realtime connections that weren't clearly communicated upfront. Multiple Reddit and Hacker News threads from 2024 and 2025 describe developers waking up to bills of $50–$400 on projects they considered low-traffic. The free tier's pausing behavior — where inactive projects get suspended after one week — also causes confusion when users upgrade just to keep a project alive, then face a recurring $25/month Pro plan charge they didn't fully anticipate.
"I thought I was building a side project on the free plan. Then realtime kicked in during a small traffic spike and my bill jumped to $180 in a single month. Nothing in the onboarding made that risk obvious."
Customer Complaints
HIGH
Source: News · Feb 28, 2026
Added 23d ago
Supabase Blocked in India Under IT Act 69A Disrupts Live Applications
In late February 2026, Supabase was blocked in India under Section 69A of the Information Technology Act, cutting off access for an unknown number of Indian users and businesses running production applications on the platform. The block appeared sudden, with no advance notice to affected customers, leaving teams scrambling to implement VPN workarounds or migrate database endpoints. Supabase acknowledged the situation but had limited ability to force a swift resolution given the government mandate.
"Our entire backend runs on Supabase and our Indian users just couldn't connect. We had zero warning. Support told us to use a VPN as a workaround — that's not a fix for a production app."
Support Failures
HIGH
Source: G2 · Jul 22, 2025
Added 23d ago
Pro Plan Support Response Times Leave Paying Customers in the Dark
Developers on Supabase's $25/month Pro plan consistently report that support ticket response times stretch from 48 to 96 hours, even for database outage situations. G2 and Hacker News threads from 2024–2025 note that the company's support infrastructure hasn't kept pace with its rapid user growth following high-profile funding rounds. Meaningful SLA guarantees only kick in at the $599/month Team plan, a fact that many Pro users say wasn't made clear when they signed up.
"My production database was throwing 500s for six hours. I had a ticket open with Supabase support and didn't hear back for two days. Two days. On a paid plan."
Customer Complaints
MEDIUM
Source: Reddit · Apr 18, 2025
Added 23d ago
Row-Level Security Misconfigurations Lead to Accidental Data Exposure
A recurring pattern in Supabase community forums and Reddit from 2023 through 2025 involves developers accidentally exposing data because they didn't realize Supabase tables are publicly readable by default via the auto-generated REST API when Row Level Security (RLS) is disabled. Supabase has added more warnings to its dashboard, but the problem persists: users spin up a project assuming sensible defaults and only learn about the exposure after a security audit or an outright breach. At least a handful of startup post-mortems cited Supabase's default open API exposure as a contributing factor.
"We shipped our MVP with Supabase and six months later a security researcher told us our entire users table was queryable without authentication. RLS was off and we had no idea that was the default."
Support Failures
MEDIUM
Source: G2 · Aug 30, 2024
Added 23d ago
Database Backups on Free Plan Are Nonexistent — Policy Buried in Docs
Supabase does not provide point-in-time recovery or automated backups on the free tier, and daily backups only start at the $25/month Pro plan. Several developers discovered this the hard way after accidental table drops or botched migrations left them with no recovery path. The policy is documented, but it sits several clicks deep in the platform's documentation and isn't surfaced during project creation or in dashboard warnings. G2 reviewers in 2024 specifically called this a dangerous omission for any developer who treats their free-tier project as a learning environment but stores real data.
"I dropped a table by accident during a migration gone wrong on the free plan. I opened a support ticket hoping Supabase kept backups. They don't, and nowhere obvious told me that before it happened."
Churn & Retention
MEDIUM
Source: Hacker News · Jan 9, 2025
Added 23d ago
Free-Tier Project Pausing Policy Drives Developers Away Before They Convert
Supabase pauses free-tier database projects after seven days of inactivity, which has become one of the most-cited frustrations on Reddit and Hacker News among early-stage builders. While the policy is documented, new users routinely discover it only after their project goes dark mid-demo or mid-hackathon. The workaround — upgrading to the $25/month Pro plan — feels punitive to users who are still evaluating the platform, and many report simply moving to alternatives like PlanetScale, Neon, or self-hosted PostgreSQL rather than paying to keep a test project alive.
"I was demoing my app to potential co-founders and Supabase had paused my database. Zero email warning that morning. That was the day I decided to self-host Postgres instead."
Misleading Marketing
MEDIUM
Source: News · Mar 22, 2026
Added 23d ago
'Open Source' Branding Obscures Proprietary Managed-Service Lock-In Risks
Supabase markets itself prominently as open source, but the practical reality for most users is that they're running on Supabase's managed cloud, where key features — including their Edge Functions infrastructure, Realtime server, and dashboard tooling — aren't straightforwardly self-hostable without significant engineering effort. A March 2026 comparison piece highlighted that migrating away from managed Supabase to a self-hosted stack requires rebuilding auth integrations, storage bucket logic, and realtime subscriptions from scratch, contradicting the implied portability of the open-source pitch. Several Capterra reviewers from 2024–2025 specifically flagged this gap between the marketing and migration reality.
"They say open source like it means you can leave whenever you want. When we tried to self-host after a pricing change, we realized we'd built against their proprietary Realtime layer. Migration took three weeks of engineering time."
Billing Problems
MEDIUM
Source: Trustpilot · Nov 5, 2024
Added 23d ago
Egress and Storage Read Costs Not Prominently Displayed in Pricing Calculator
Supabase's pricing page leads with per-project dollar amounts but buries egress fees ($0.09/GB after the free allowance) and storage read/write costs in smaller print. Developers building media-heavy apps or applications with high read frequency have reported that their actual monthly bills ran 3–5x what the pricing calculator suggested when they only input row counts and project numbers. Trustpilot and Capterra reviews from late 2024 and 2025 call out the calculator as misleading for anything beyond a basic CRUD app.
"The pricing calculator said maybe $30 a month. My first real bill was $140. The difference was all egress and storage reads, neither of which the calculator made obvious."
Frequently asked questions about Supabase
Is Supabase worth the price?
We've documented 3 billing complaints against Supabase — a signal worth weighing before committing to a paid plan. Its Risk Score of 100/100 puts it in the "Severe" band. See the full complaints breakdown → before deciding.
Is Supabase easy to cancel?
Cancellation difficulty is one of the top SaaS frustration patterns. Check the complaints page → — we tag cancel-related issues under "Billing" and "Contract Trap" categories. If none are documented yet, run a scan to surface what's currently out there.
Does Supabase have hidden fees?
Hidden-fee complaints fall under our "Billing Issue" category. We've documented 3 billing complaints for Supabase so far. See all complaints → for the full picture.
How does Supabase compare to its alternatives?
We track other devops, monitoring & observability tools and rank them by Risk Score. See our alternatives comparison → to find lower-risk options in the same category.
What are the biggest complaints about Supabase?
The highest-severity documented complaints involve billing problems. Read all 13 documented complaints on the complaints page →
Is Supabase a scam?
Probably not in the strict legal sense — most SaaS products with bad reputations are real companies delivering a real (if disappointing) product. But "is it a scam" is the question people ask when they feel they were misled. Read our full scam analysis →
How does Supabase's Risk Score get calculated?
We weight each warning by severity (Low to Critical) and category, then aggregate. Lawsuits and misleading-marketing claims weigh heaviest. The current 100/100 score puts Supabase in the "Severe" band. Full methodology →
Where do these complaints come from?
Each warning is paraphrased from a public source — BBB filings, Trustpilot or G2 reviews, Reddit threads, Capterra ratings, court records, or news articles. The source URL is attached to every warning so you can verify it yourself. More on our methodology →