Why does that make you think it's not looking at user's private information? He's running a test, and he wants to make sure his new function retrieves data pro

Why does that make you think it's not looking at user's private information? He's running a test, and he wants to make sure his new function retrieves data properly. He can search for his own name, but out of idle curiosity and boredom (he's seen his own data a million times, he wants something visually distinct on his screen), he searches for the name of a friend of his that he hung out with last week. It's only a few different keystrokes to type the alternate name, but now he's accessing private information and gets canned.