>I've heard them explicitly sell the information of an entire user's friends list to anyone willing to pay.

So does FB actually sell data to third parties? I've seen many on here say that is not the case.