YOU are worried about discretion???

But you are going to search out your co-workers on here? WOW! Talk about indiscreet and nosy

you uncheck the box on your profile that says "show whitelist?"  Still searchable?

It has always been searchable in the whitelists,
The best thing for anyone who is still using their regular email addy for ter is to go into your account manager and change it.
BUT
remember to let your regular providers and references know about hte changes,otherwise you'l run into problems down the road when you give an email that does not match.
Stay Safe & Hobby Smart
xoxoxoxo
Leigh

How does a provider go about tracing the email that we use to set up our TER accounts and then connecting that to the White List and hence our screen names?

Granted, the email you set up the TER account with should be a private one with an alias to boot, but I thought that only TER had access to that.  How does a provider or other TER member get a hold of it?

Isn't the whole idea of TER's PM system a way for TER members to communicate with one another without ever revealing our true identities?

Granted the the White List only works for clients who do not mind linking their real names to their TER handles, but that is an individual choice, or should be.  Many clients feel that they can not write a review honestly without that anonyminity.

For those who don't mind, the provider can send a PM to the client who claims to be the White Listed person and thereby confirm that they are not stealing someone else' screen name identity.

You should have a completely separate email address for hobbying. Not a business email, not even your primary personal email. To not do this is just plain stupid.  If you want to further insulate yourself I would use a different email address for TER than I do for providers.  This is what I do and have done fr years.

Okay, I can write an elaborate analysis on the security flaw(s), and ways to get around at least some of those flaws, but I think the respondents earlier have already covered it for you.  It would involve using multiple e-mail addresses similar to what BostonGuy57 wrote.  

I totally understand the need to cross reference!
But I should be able to limit who gets to see my TER handle and reviews.  

Here's a (rough) simplified analysis:

There are levels of users that are pertinent in communicating with providers:

Level 1 - Public Internet User
Level 2 - Registered User
Level 3 - Limited VIP Member
Level 4 - VIP Member
Level 5 - Provider You Contact
Level 6 - Provider With Whom You Wish To Share Your Whitelist

It seems that once someone has your e-mail address that is linked with your TER account, they only have to be at level 2 or 3 to do at least the following:
1. Test membership in TER
2. Get at your review and posting history
3. If your account manager "show whitelist?" checkbox is checked, see your whitelist.

What I am saying is that TER could have implemented a scheme limiting showing the whitelist to only "Level 6" members above.  Such a scheme would have been more secure.  

Instead the levels are collapsed more than they need to be.

I agree it is a dumb idea to use your personal (and especially your professional) e-mail address to register in TER, but I am sure many folks are using at least the former with their TER accounts and are not aware of the above security flaw.