I can confirm this, at least generally. Given access by a user, you had access to all the data the user could access, including the user’s friends’. There may h

I can confirm this, at least generally. Given access by a user, you had access to all the data the user could access, including the user’s friends’. There may have been exceptions, but, for example, friends’ likes were accessible.