Separate public and private data#
A discoverable profile can show a name, username and verification status. Legal identity, phone, routing, balances, salary and holdings do not belong in that projection.
Scope the relationship#
Bilateral history belongs to its two participants and follows sharing permissions. Phone search requires opt-in. A broader Trust summary does not reveal unrelated counterparty names.
Before production#
Define lawful processing, consent where required, access rights, retention, deletion, security and review of automated decisions. LocalStorage and UserDefaults in this demo are not a production privacy architecture.