I remember some time ago hearing about Google creating profiles of people who appeared in the contacts of people who had Gmail accounts but did not have one themselves. Remember, Google is selling you to advertisers and their approach seems to be to avoid taking responsibility rather than asking for permissions before hand.