@dudekulasus The QR code "just" contains a link. This link can lead anywhere you want.
If you want a user to scan a code and then display something, that something would have to be presented by a page to which an unauthenticated user has access to. Imagining the QR code being scanned from a phone on which this page is then opened.
That _could_ be a UI page which is configured to be publicly accessible.
That however may be a security problem if you plan to show a user's name, email and phone number. Personal Identifiable information - you know the drill - must be protected.
One can argue that a link that would contain that user's sys id to identify which user's details you want to display sufficiently protects all other user's data from being harvested - but I would not bet on this assessment by your security team.
What is the use case? What problem are you trying to solve?