Are private biodata links really private?

They are as private as your recipients' behaviour. Choose trustworthy intermediaries, avoid mass forwards, and revoke when needed.