The user doesn't have to control the privacy. You can set it to moderator controlled privacy then set the defaults and it should apply to every user and only allow moderators to change it. The alternative is to place your tab in a not shown on profile position, leave its access as public, create a new tab with the access you're wanting to see the fields, then use delimiter fields to substitute in your private data to your new tab.