Apps won't have access to the user's home directory by default, but they will have access to ~/.config/{appname}/ by default, which they can use to store configuration and user data.
My understanding of the private-data abstraction is that using it will prevent access to those directories (~/.gnupg, ~/.ssh, etc) even if some other abstraction (or helper) gives access to a parent directory (~/).