Data privacy in data modeling