For the record, I can confirm that making your profile private doesn’t exclude you from the year in review.
It seems like anyone who wants their profile to be private might also not want their usage data broadcast to the world. Any chance of adding this feature?
Which data are you worried about? I think the data about users is almost the same data that is available in the user directory, and a private profile doesn’t remove you from that either.