The URL you pass to the AVAudioRecorder initWithURL:settings:error:
method is a file URL to a location in your app's sandbox. This is where the audio file will be saved. Since this is in your app's sandbox, no other app has access to it (at least on a non-jailbroken device).
Keep in mind though that if the user deletes your app, any recording you save in the app's sandbox will be deleted along with the app.