can we hide internal users?

I have been able to configure JIRA to allow for external users to create and see issues they've created. But management isn't so keen on our external users (clients) being able to see to whom an issue is assigned, and more importantly, their e-mail address. I notice that Atlassian doesn't seem to mind. Has anyone else come across this security issue and found a solution?