Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe read. The description adds value by disclosing the shape of the payload (name, email, phone, custom field data) and that notes are included only on request. It says nothing about error behavior for a nonexistent id, rate limits, or authentication, which is the remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.