Can users see the contact records of the people they can access?

Users who see the Contacts tab in the Manage Person work area can see a worker's contacts, unless the contacts are workers. If a contact is a worker, then the contact's details are secured by person security profile.

Personally identifiable information (PII), such as phones and emails, isn't visible unless the user inherits the Manage Contact Person PII aggregate privilege. Any user can see the contact records of his or her own contacts.