An apparatus for maintaining privacy when providing media content to a group includes at least one sensor coupled to a processor that is configured to observe, based on sensor data from the sensor(s), that more than one user is engaged with the apparatus, and to obtain user identities for at least a first user and a second user engaged with the apparatus. The processor looks-up a first privacy preference for the first user and a second privacy preference for the second user based on the user identities of both users. The processor determines restricted content based on the first privacy preference and the second privacy preference and determines and outputs for display suggested content for engagement by the first user and the second user, based on the restricted content, where the suggested content satisfies criterion for the first privacy preference and the second privacy preference.