How do you handle a co-author who won't share the data?

I'm working on a paper where a co-author holds the dataset and won't circulate it, which makes it hard to check the analysis or respond to reviewers.

I don't want to escalate things unnecessarily, but I also can't verify the results.

How have others handled this without blowing up the collaboration?