> Facebook allowed the device companies access to the data of users’ friends without their explicit consent, even after declaring that it would no longer share

> Facebook allowed the device companies access to the data of users’ friends without their explicit consent, even after declaring that it would no longer share such information with outsiders. Some device makers could retrieve personal information even from users’ friends who believed they had barred any sharing How do you know this information never left the device? Or, given the nature of the FB API, that it used the device at all?