Hear me out – so we'd need these data in the case that admins/members would want to see stats or people who signed in for the events. I think it'd make sense to have like a flag on the service side where it can be a trigger to pop or keep the items inside. Then, we could have two separate APIs (one with auth that does not trigger the flag to hide data and the other being public with sensitive data being popped out).

Let me know what you think!