gmail TOS: http://www.google.com/accounts/TOS?hl=en http://www.google.com/accounts/TOS?hl=en 6. Your passwords and account security 6.1 You agree and und

gmail TOS: http://www.google.com/accounts/TOS?hl=en http://www.google.com/accounts/TOS?hl=en 6. Your passwords and account security 6.1 You agree and understand that you are responsible for maintaining the confidentiality of passwords associated with any account you use to access the Services. 6.2 Accordingly, you agree that you will be solely responsible to Google for all activities that occur under your account. 6.3 If you become aware of any unauthorized use of your password or of your account, you agree to notify Google immediately at http://www.google.com/support/accounts/bin/answer.py?answer=58585. It's not absolutely clear, but 6.1 says to me "don't give your password to anyone." Whether it's for auto-scraping or not. If I give my password to FB to scrape my contacts, I (but not necessarily FB) have violated 6.1 because my password is no longer confidential. So FB is at least relying on someone (me) violating TOS.