The fact someone has applied to you could be highly confidential.
What he meant is that you are putting the private data of the applicants on the internet, on the servers of another company. I too find this highly dubious.
The fact someone has applied to you could be highly confidential.