That is exactly the sort of middle ground I had in mind. You aren't entirely prohibiting sharing data that might involve other people, but it is only shared for a specific purpose requested by the person providing the data and never used for anything else.