Hello,
I don't know what is a "sandbox-recognized account" but if you're using a common Joomla account for all the orders ; that's normal that this account can access to all order it made.
Each customer must have its own account (login, password, addresses.. orders).
Regards,
Jerome - Obsidev.com
HikaMarket & HikaSerial developer / HikaShop core dev team.
Also helping the HikaShop support team when having some time or couldn't sleep.
By the way, do not send me private message, use the "contact us" form instead.