quick question (help appreciated!)

is it possible for someone to find your account even though you have never given your username out to anyone besides friends? (i have never posted my username anywhere for just anyone to find it, and i am not in any servers)

sorry if this is an obvious question i’m just trying to solve a mystery LOL!