User data sanitization