Please explain exactly what an email recipient outside the domain can find out from an email address. We would like to add home address and phone number information to Active Directory for our users, but want to be sure that no one outside the domain can view that information. Thanks!

These additional attributes are not sent via smtp. Just from, to, display name, return path, and server info.