Just ask for an initial conf call to discuss the project, leaving out the most sensitive details. They can decide what is too sensitive. If they won't even tell you the gist of the project without an NDA, they're probably not a good client and you should walk away.
