Mastodon is not a good place to share private data. It's a distributed set of SQL databases. There's no real oversight or accountability. There's not really even an attempt to secure anything. There's no encryption, even for DMs. It's all stored in plaintext in Postgres (and often elsewhere, like Elasticsearch and Amazon S3).
The original server operated by the Mastodon gGmbH non-profit