Private and secure autocomplete suggestions are enabled based on a user contacts database, even when an application has not been granted access to the user contacts database. A keyboard process can receive and display suggestions based on input provided via the keyboard. The suggestions are generated based on a contacts database of a user. The suggestions are generated without exposing the contacts database to the application. Suggestions are then displayed to the user without exposing the suggestions to the application. Once a suggestion is selected by a user, the selected suggestion is provided to the application for insertion into a text field.