Is shielding private data from apps possible by isolating/jailing them?

I want to keep my contacts list, call log, photos etc private. Xprivacy/Xposed looked like a viable path, but as of today (June 2017) it seems to be dead-ended and there is no sign of a Nougat release anytime soon. Thus, afaik, faking results for api call is not a possible option for Android Nougat. An other option I had in mind is to run certain apps in an empty environment. I was thinking i could achieve that by creating multiple users. I don't know what effects this could bring for my privacy. My hope would be that nothing would be shared between different users. After digging in the Android documentation I'm not so sure about that being true. 1. How much isolation does creating extra users bring? 2. Are there alternative ways to sandbox/isolate apps?