"there are no legal obligations surrounding the data about you it obtains from your friends"
How many countries does this apply in, or is it just an example of an American business assuming they can always do things The American Way throughout the world until they get slapped down?