Who can see my benefits?
Visibility is set per benefit rather than per person. Each record in the catalogue carries a flag deciding whether that benefit appears on user cards, so a company chooses which benefits are shown openly and which stay on the administration screens. Your enrolment list is not visible or hidden as a block.
Setting this on the benefit rather than on the employee is an unusual choice, and it is the right one.
Benefits differ in how sensitive they are. A lunch subsidy is a fact about the office. A medical scheme or a provident fund contribution is closer to a personal matter.
A per-person setting would ask every employee to make the same judgement separately, and they would disagree. A per-benefit flag lets the company decide once, for everybody, on each item.
The flag governs a specific surface: whether the benefit shows on the cards where people appear. Turning it off does not delete the enrolment. The record is still there for whoever administers benefits.
So the practical result is a split catalogue. Some benefits are part of what the company shows about itself. Others are administered without being displayed.
The administration side is separate again. The enrolment matrix, the subscriber counts and the filters by department and benefit sit behind the benefits permissions rather than on any employee screen.
A count is worth noting as the exception it is. A benefit showing thirty-one subscribers out of thirty-four reveals take-up without naming anybody, which is a different kind of disclosure and is usually fine.
Anyone holding the benefits permissions sees the full matrix regardless of the display flags, because the flag governs where a benefit is shown rather than who may administer it. The two are different questions with different answers.
Review which benefits carry the visible flag before a joiner ever sees a user card. The default on a new record is easy to accept without thinking, and a card is a public surface.
Related questions
Does hiding a benefit remove my enrolment?
No. The flag decides where a benefit is displayed. Enrolment continues and stays visible to whoever administers benefits.
Can I hide one benefit but not another?
Yes, and that is the point of setting it per benefit. The choice is made once per benefit and applies to everyone enrolled in it.
Who sees the enrolment matrix?
A role with the benefits permissions. The matrix, the subscriber counts and the filters are administration surfaces rather than employee ones.