A Directory You Never Opted Into Reading Carefully
If you live in a community with a homeowners association or condo board, you likely received a resident directory at some point, a list of names, unit or address numbers, and often phone numbers and email addresses for every member. Most people barely glance at these before setting them aside. Few realize that depending on how the association distributes and stores this directory, it can end up considerably more exposed than a private document shared only among neighbors.
How This Data Gets Out
- Digital directories hosted on third-party HOA management platforms sometimes have weaker access controls than residents assume, and a platform data breach or misconfiguration can expose the full directory well beyond the community itself.
- Directories shared via email or as PDF attachments are easy to forward, and once a copy exists outside the association’s control, there’s no way to recall it.
- HOA meeting minutes and board communications, if publicly posted online (some associations post minutes to a public-facing website rather than a resident-only portal), can inadvertently include names and unit numbers.
- Property records already tie your name to your unit independently of the HOA directory, so even a perfectly secured directory doesn’t fully close this exposure, it’s one layer among several.
What You Can Do
- Ask your HOA or condo board what platform hosts the resident directory and what access controls exist, whether it’s resident-only, board-only, or has ever been distributed via a general email that could be forwarded.
- Opt out of optional directory fields if your association allows it, many HOAs let residents choose not to include a phone number or email in the shared directory, even if a full listing is otherwise standard.
- Request minutes and communications stay in a resident-only portal rather than a public-facing website, if your association currently posts them publicly.
- Address the underlying property-record exposure separately, since your name being tied to your unit through county records exists independent of anything the HOA does. See our standard data removal service comparison for cleaning up the people-search side of this.
The Bottom Line
An HOA directory feels like a private, neighbors-only document, but depending on how it’s hosted and distributed, it can be considerably less contained than that. It’s worth a five-minute conversation with your board about where the directory actually lives digitally and whether opting out of optional fields is available, a small step that closes a leak point most residents never think to check.
In California, the Directory Is a Statutory Record, Not Just a Neighborly PDF
The reason an HOA directory is more exposed than it feels has less to do with the PDF and more to do with what the law says the association has to hand over. In a California common interest development, the membership list is not an informal courtesy document at all: Civil Code section 5200 defines “association records” to include membership lists covering name, property address, mailing address, and email address[2]. And under Corporations Code section 8330, a member can demand to inspect and copy the record of members’ names, addresses, and voting rights on five business days’ prior written demand, or obtain a compiled list of members entitled to vote for directors, so long as the demand states the purpose it is requested for[3].
That is a meaningfully different exposure than “a neighbor might forward the PDF.” It is a right another member can exercise on request. The statute does put limits on it: the demand has to be for a purpose reasonably related to that person’s interest as a member, and where the association reasonably believes the information will be used for some other purpose, it may deny access to the list[3]. The association may also, within ten business days, offer a reasonable alternative that accomplishes the stated purpose without providing access to or a copy of the membership list at all — typically by handling the requester’s communication itself[3].
The Opt-Out Most Residents Never Hear About
This is the part worth knowing, because it is a specific statutory right rather than a favor you ask the board for. Civil Code section 5220 says that a member of the association may opt out of the sharing of that member’s name, property address, email address, and mailing address by notifying the association in writing that the member prefers to be contacted through the alternative process described in subdivision (c) of Corporations Code section 8330. The opt-out remains in effect until the member changes it[1]. It was amended into its current form by SB 392 and took effect on January 1, 2022[1].
The reason this matters more than a general request to the board is what section 5200 does with it. The membership-list definition carves the opt-out straight out of the record: association records include membership lists but not including information for members who have opted out pursuant to Section 5220[2]. In other words, the opt-out does not merely ask the association to be discreet — it removes your contact information from the thing another member is entitled to demand a copy of. You are still reachable, because section 8330(c) is the alternative-contact mechanism the opt-out points to: the association may offer a method that achieves the requester’s stated purpose without disclosing the list[3].
Two practical notes. First, the statute says in writing, so a verbal mention to a board member at a meeting is not the request; send it and keep a copy. Second, the opt-out covers the membership-list disclosure route. It does not touch the county property record that ties your name to your unit, which exists independently and is one of the most common sources people-search sites draw from.
If Your Association Is Not in California
The specific sections above are California law and do not transfer. What does transfer is the question to ask, and it is a sharper question than “is our directory private?” Ask the board, in writing, two things: under which statute or governing document is the membership list subject to inspection by other members, and does that framework provide any opt-out or alternative-contact process. Most states regulate community associations through a nonprofit corporation statute plus a common-interest or condominium act, and member inspection rights of some kind are common; whether an opt-out sits alongside them varies a great deal. Getting the answer in writing is useful on its own, because it tells you whether the directory is a document the board controls by policy or a record it is legally obliged to produce.
References
- California Civil Code § 5220 (Common Interest Developments — Record Inspection), amended by Stats. 2021, Ch. 640, Sec. 7 (SB 392), effective January 1, 2022. California Legislative Information
- California Civil Code § 5200(a)(9) (definition of “association records,” including membership lists), amended by Stats. 2025, Ch. 516, Sec. 3 (SB 410), effective January 1, 2026. California Legislative Information
- California Corporations Code § 8330 (Nonprofit Mutual Benefit Corporations — Rights of Inspection). California Legislative Information
