Usually quite common when doing contract work, where externals have no access to anything besides a sandbox to play around with their contribution to the whole enterprise software jigsaw.
That's a strange point of view. Clearly one shouldn't use private information for testing in any production environment.
As a person who works on this kinda stuff I know what they mean. It’s very hard to debug things totally blind.