Why my CMS cannot limit the permission of reading contacts

Hi, team:

I am using the CMS 2.3.291759.97. And I have set reading contacts = FALSE in my Privacy Advisor.
However, the application I have taken control can still read my contacts information.

Where is my mistake?
Thanks