Is it a security violation to show a directory of users?

[downey (Michael Downey)]

If someone posts, they are a customer, and you can see them posting.

Not if your clients post in a client-only private category.