@Da Weezil
You gave the users that data.
The user(s) then gave FB permission to access it. The legality is yet to be tested, but good luck suing your mum/sister/uncle/mate who installed FB messenger thus granting permission. They are the one(s) who handed over your data.
FB asked and they said "yep".