When users have the access to edit cards and pages, they will also have access to see all contacts and user profiles.
We have more than 200 users across departments. I think we really need to add access to enable/block users from seeing/not seeing other user profiles.