Since I worked on a Mastodon client, I know that there is a hide_collections
parameter in the account settings which allows you to not disclose publicly your followers and following.
It's in the PATCH v1/accounts/update_credentials
API request body, see documentation here.