Data secure (mget)

Hi,
I’m working on a app, it’s like a slack/facebook people can post stuff, msg …
But people need to be login so you need a accunt.
One part of the app is no accunt, it’s a “blog”" part, people can post articles and everyone can read (login or not).

I have privates rules on my table Users but why the data sent to someone who isnt login in the blog part is a mget whit all the information about the user who post the article ?
Like he can read insinde the mget the mail, phone number, full name… (not check in privacity rules Users if this user is not login)

How can i hide the informations ?

Can you post your screenshots of your privacy rules?