I've noticed Siri can access notes and contacts saved on my phone when it is locked simply by asking her for them. To me, this appears to be a security breach and I've reported it to Apple but, being a new Siri user, is this business as usual?
Siri can certainly do more things while the phone is locked, like send messages, read them, etc. The only option really is to turn off Siri access when the phone is locked.