Do those listed in the directory have the ability to change their own data?

Yes, if you allow it. Personory has an array of options that allows you to turn on/off various permissions, including what users see and what they are able to change.