No, you don't have to share any sensitive data. Permify only needs unique ID of your users, for access control inquires. Some features might need couple more data such as users name, but mostly it's optional. Only required field we need is your users unique ID.