When the cursor hovers over the select user field, user avatars in comments, user avatars in tasks, and @mentioned users, the basic information of the respective users will be displayed. It includes user's name, email, phone/extension/mobile, online status, photo, job title, and department.
Note: External users cannot see user cards, so there is no need to worry about data leakage.
This information comes from the user page.