Hi Katie,
My first and continues to be my direction is to not create anything like this for members. Given the control of a login and a password seems secure enough, however, you might find some members could abuse the list for work solicitation or advertisements etc. We control our dB (F1) very closely so that the information kept would not get loose.
Another thing that you would have to consider for the church protection as well as individuals is to have a release form that was very specific to the person on what information could or could not be published to the membership directory. This will ultimately create administrative work for your technology team and I for one do not need more (grin).
The way we allow members to contact others is through mutual exchange. If someone calls for phone number or email we take that persons name and call the individual and let them make the decision on contact.
I would be very reluctant to creating a member accessed roster unless all the members agreed on what could be given out over the web. Personally mine would not be available.
I am happy to chat with you about network, internet, email security.
Peace,
Bob Austin, IT Division Leader
The Cove Church, Mooresville, NC
Bob
Have a Blessed day <"}}}><(
IT Division Leader @ The Cove Church