Thoughts on allowing Cronofy calendar access to MS365?

I have some users requesting Cronofy access to their accounts/calendars. Is there a way to ensure that data which Cronofy accesses is kept private? And is it better security practice to use an organization account that has access to certain user calendars, or allow end-user authentication?