Yikes... you give everyone admin access??? If someone has backend access to your site, they WILL have access to records, completely. Nothing you can do about that presently.
You need to rely on frontend access only... use our Attendees list as you can set the access level of who can see it... and you control what data shows in the list. That is what that is intended for. View only, no editing.