Yes is the simple answer. Never provide any confidential business information to a potential buyer before they agree and sign your non disclosure agreement (NDA). It's just not worth the risk and it is the first step in qualifying if they are a serious buyer or if they are just fishing for information about your business.