Alternative solution:

Remove the merge fields from the "Profile Display Form" that need to be kept private, such as email address, home address, home phone number, etc.