For clarification, I would apply Row Owners to ALL sheets that contain private date and an email column. I don’t believe a relation from a row owner protected sheet (such as user profiles) to another sheet will necessarily protect the data in that second sheet. It will hide it, but not prevent it from being downloaded in the first place.