By leak you mean people giving consent when presented with the list of permissions the app / quiz requested? I think the outrageous part is that app developers

By leak you mean people giving consent when presented with the list of permissions the app / quiz requested? I think the outrageous part is that app developers could get data of their users' friends - those are the people that never used the app or agreed to its permissions.