Keeping API keys secret with javascript/react apps

How can I ensure that third-party API keys in a react app remain hidden/secure from the app user? If i use a service like netifly for deployment, will it automatically take care of this?