Odd. Seems like the concerns could be taken care of by a) not just giving them a straight copy of the database and therefore b) just giving them controlled access via user credentials (i.e., that particular user only gets access to certain sanitized views or certain tables).

Seems like the privacy concerns could be fairly straightforward to address by a competent DBA or two.