From https://www.facebook.com/terms.php, item 2.3
When you use an application, the application may ask for your permission to access your content and information as well as content and information that others have shared with you. We require applications to respect your privacy, and your agreement with that application will control how the application can use, store, and transfer that content and information. (To learn more about Platform, including how you can control what information other people may share with applications, read our Data Policy and Platform Page.)
Look at the example of what LinkedIn and WhatsApp and all its ilk does: I don’t want to be on those platforms. But friends upload their address books all the time, so I’m fairly sure they all have a full view of my social connections. How and where did I agree to that? How can my friends meaningfully consent to that on my behalf?
If both parties aren't all committed or informed, this is simliar an intoxicated person entering a legally binding agreement.
These so-called "clickwrap" or "browser-wrap" agreements have definitely been found to be enforcible. However the details of exactly how the agreement was presented and what the user had to click can affect their enforcibilty.
Source: https://www.americanbar.org/publications/communications_lawy...
FB and other big data corporates need to be reminded of this.