Avatar uploads can be disabled with the site setting allow uploaded avatars
I don’t believe we have a way to disable bios, so CSS could do it:
#user-card .bio, // user card
.user-main .bio, // profile page
.control-group.pref-bio { // user preference
display: none;
}
No setting for location either, so also use CSS here:
#user-card .location, // user card
.user-main .user-profile-location, // profile page
.control-group.pref-location { // user preference
display: none;
}
A savvy user could undo that CSS in their browser inspector to add the data, but I’m not sure why they’d go through that effort!