Each custom field can be given one of three visibility settings: invisible, everyone and user. The invisible setting can be used to hold private data. The user setting can hold sensitive information. The everyone setting can be used for public information.