Per the orcid.org website, “ORCID records hold non-sensitive information such as name, email, organization and research activities. ORCID understands the fundamental need for individuals to control how their data are shared, and provides tools to manage data privacy. We take steps to protect your information, consistent with the principles set forth in ourPrivacy Policy, which are intended to comply with the Safe Harbor Principles issued by the U.S. Department of Commerce.”
For each research entry you can choose among three levels of security: public (anyone can see the entry); limited (you choose who can see the entry); private (entry can be seen only by you.) When the ORCID account is first created, the default security level is public.