Not necessarily, you can define the protocol such that it's all done with opaque IDs instead of identifying info.