Randomized algorithms for precise measurement of differentially-private, personalized recommendations