If the data needs to be read by an external user, provide a method passing the value of the data. Do not allow pointers to escape.
It should be clear reading this that there may be questions about what you're doing with the underlying data, and whether you really want to expose it externally or whether the package should handle the work being done with the values involved.
Truly public information should be exposed as such.