Who can search me by email address?

By default, any system player can search you in the system using your email address. However, you can change this setting in the Privacy settings page.