But AFAIK both CA and NYU got "consent" to access data from the users who installed their game/extension, but neither are asking consent from users' friends (ie

But AFAIK both CA and NYU got "consent" to access data from the users who installed their game/extension, but neither are asking consent from users' friends (ie the crux of the CA scandal).