diff --git a/core/server/web/members/app.js b/core/server/web/members/app.js
index 5ad8433a19..afad9fc3aa 100644
--- a/core/server/web/members/app.js
+++ b/core/server/web/members/app.js
@@ -18,6 +18,9 @@ module.exports = function setupMembersApp() {
     // Entire app is behind labs flag
     membersApp.use(shared.middlewares.labs.members);
 
+    // Members API shouldn't be cached
+    membersApp.use(shared.middlewares.cacheControl('private'));
+
     // Support CORS for requests from the frontend
     const siteUrl = new URL(urlUtils.getSiteUrl());
     membersApp.use(cors(siteUrl.origin));