A method at a device, comprising: receiving at a processor of the device from a user application (222;602) of the device, by a first base application in a set of base applications (226;604) of the device, a request for a requested information record within a set of information , information records within the set of information comprising at least one respective private information field, the set of base applications (226;604) having access to the set of information, the user application not having access to the set of information; determining by the first base application, based on the request, a respective indicator for each respective original data item within each respective private information field within the requested information record; providing by the first base application to the user application, based on receiving the request, a protected set of information, the protected set of information comprising the requested information record with the respective indicator replacing respective original data item within the at least one respective private information field of the requested information record; receiving from the user application, by a second base application in the set of base applications, at least one respective indicator, wherein the second base application is separate from the first base application and comprises at least one process belonging to a group comprising a calling process, a message sending process, and a display process; determining , based on the at least one respective indicator received from the user application, the respective original data item corresponding to the respective indicator; and executing the at least one process with the respective original data item, the user application being unable to capture the respective original data item. receiving at a processor of the device from a user application (222;602) of the device, by a first base application in a set of base applications (226;604) of the device, a request for a requested information record within a set of information , information records within the set of information comprising at least one respective private information field, the set of base applications (226;604) having access to the set of information, the user application not having access to the set of information; determining by the first base application, based on the request, a respective indicator for each respective original data item within each respective private information field within the requested information record; providing by the first base application to the user application, based on receiving the request, a protected set of information, the protected set of information comprising the requested information record with the respective indicator replacing respective original data item within the at least one respective private information field of the requested information record; receiving from the user application, by a second base application in the set of base applications, at least one respective indicator, wherein the second base application is separate from the first base application and comprises at least one process belonging to a group comprising a calling process, a message sending process, and a display process; determining , based on the at least one respective indicator received from the user application, the respective original data item corresponding to the respective indicator; and executing the at least one process with the respective original data item, the user application being unable to capture the respective original data item. <EOS>