Look up differential privacy. Done right, it is impossible to do what you said.