Not “all kinds”. Users routinely approve the use of their friends list, and in this case, this is what was downloaded and data mined, in addition to user’s own profile information. I know this is too much nuance for a lay person to handle, but I expect more from HN readers.

The scummy part was that the data was obtained using an app that’s unrelated to what the data was eventually used for, but Android is totally ripe for that as well.