Implement private data filtering function

This actually depends upon #10.

Ping: @kaitlin @afeld 
The email_groups don't appear in the public site.