Yes, the most sensitive data will be stored in the blockchain.

And how do you revoque authorizatio to read it?

We can simply remove that identity from list, so it will not be able to read or write. I think we can also change permissions, to restrict reading/writing.