I think Parent was referring to the Facebook–Cambridge Analytica data scandal [1], where personal data belonging to fb users was collected without consent by a

I think Parent was referring to the Facebook–Cambridge Analytica data scandal [1], where personal data belonging to fb users was collected without consent by a third party through API and then used for political advertising for the 2016 US election. However, I don't think it's a fair comparison. In the CA case, users were deceived into a research and had their social graph being accessed without being told such implication. Here, the user has the control over the generation of links and the resource being linked; the user must manually generate and invoke the link to cross-access resource between apps. [1] (https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Analytica_data_scandal https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...)