This gets to the debate around if you can consent when giving up information about your friends. For example, is it OK for someone to give a company access to their phone's address book when the people in it haven't consented themselves?