Hiding the Presence of Individuals from Shared Databases