For that to happen, one of your friends would have had to willingly allow this tool to scrape their social network, which would include your private posts. Is

For that to happen, one of your friends would have had to willingly allow this tool to scrape their social network, which would include your private posts. Is the scraper to blame here, or the friend?