PSI ( Ψ ) : a Private data Sharing Interface ∗ ( working paper )