As you mentioned, referencing the Private Member data collection is problematic in that scenario since it has a preconfigured set of permissions that cannot be modified.
Admin - Able to read everything
Member - Able to read his own item
Guest - No access
Therefore, consider removing the reference to the collection and instead have the Reviewer information directly in the Review collection, which can be set to allow read access to guests.