Data masking for recommender systems