For information about other people I try to do what's normal and expected unless I have information and what they specifically want.
This often means running blog posts past my housemates, or phrasing experiences in ways that reduce identifiability or at least give plausible deniability.
Does he apply his personal approach when handling my mother’s maiden name, my birthday, etc.