Yes.
Happy to argue this ad infinitum but, basically, nothing (let me repeat that - NOTHING) is private once handed over to Facebook.
And that extends to data your friends upload about you.
I'm not talking about anonymous, aggregated data. I'm talking about actual personal private data.