This gets to the debate around if you can consent when giving up information about your friends. For example, is it OK for someone to give a company access to their phone's address book when the people in it haven't consented themselves?
Reminds me of Facebook and LinkedIn shadow profiles.
(which have been deemed illegal in some countries)