I think it would be expected for local access, on the device where the data was originally stored. It is wholly unacceptable for them to upload that data. If someone has my name and phone number and installs Facebook, they have just given Facebook all of my personal information.