Add "Who can see my data" section to profile page

@nicolashery here its against the right branch
any reason to split over the two lines and not just be return cb(); ?