We've noticed this odd behavior and hope someone can explain what is going on. tl;dr: Notebooks shared with individuals are visible to anyone with the URL and an Evernote account, not just the individual(s) to whom an invitation was sent. The owner of the shared notebook cannot see that more people than intended are viewing/modifying the notebook. Long version: -All users in this example have evernote accounts. -Evernote user User1 creates and shares a Notebook with User2. They do this using the "Share with individuals" settings, NOT with Share with the world. -User2 receives the email from Evernote, clicks the link, and can now see/edit the shared notebook both online and in their Evernote client. User1, the owner of the shared notebook, can look at Shared Notebook Settings and see User2 listed as "currently shared with" and can remove their access. So far this is all working as expected, nothing out of the ordinary. -This is where it gets weird. -User2 sends the URL to User3. Either by forwarding the email, pasting it in IM, posts it on their website, whatever. -User3, clicks the URL and can see/edit the Shared Notebook originally shared by User1. -User1 is totally unaware that User3 now has access to the notebook and does not have the ability to remove their access. What's up with that? Bug or 'feature'?