Exclude other accounts visibility

Hi,

I have got some accounts created on my site.
e.g.

john smith has url /user/john-smith
tom johnson has url /user/tom-johnson

Someone might try another combinations and see some confidental datas. Is is possible to exclude visibility of another accounts? I mean, john cant see toms account.

Hope u understand it was hard to write ??