this is likely expected behavior. Users can sometimes see basic contact entries but get a “no permission” message when opening profiles. To fully hide contacts, remove access to the Contacts module or adjust role permissions (especially default roles like “Registered users” or event-related roles). ...