Uhm, there are many companies that have access via the FB API to users' data and the data of their friends. E.g. CA/SCL. The TOS says you're not allowed to pass it on to third parties but that is exactly what CA/SCL did and FB didn't do much about it when they found out.

So much for protecting your personal info. That is why such a stink is being made about this story.