Can a distributed network of quantum sensors estimate a global parameter while protecting every locally encoded value? We answer this question affirmatively by introducing and analysing a protocol for distributed quantum sensing in the continuous-variable regime. We consider a multipartite network in which each node encodes a local phase into a shared entangled Gaussian state. We show that the average phase can be estimated with high precision, exhibiting Heisenberg scaling in the total photon number, while individual phases are inaccessible. Although complete privacy - where all other combinations of phases remain entirely hidden - is unattainable for finite squeezing in multi-party settings, it emerges in the large-squeezing limit. We further investigate the impact of displacements and optical losses, revealing trade-offs between estimation accuracy and privacy. Finally, we benchmark the protocol against other continuous-variable resource states.