Currently, if you add a contact that doesn't link to an Account, the contact is private and can only be viewed by the owner of the contact.
In some situations you can't link an account to a contact. See
http://ideas.salesforce.com/article/show/63214 Solution: add a setting to make contacts without an account public. Of course, all other security methodology for contacts remains.