The problem is not collecting its connecting the data with users who did not give permission.

The social graph should be one way not two-way and unrelated data should be discarded.

Like in the post we had a few days ago where someone exported his Facebook data and got call histories from his mother in his data.