Your "friends list", sure google crawled that from your inbox, but surely you are aware they have that information and have in essence authorized them with it by using their service to email people.

The "friends of friends" bit is the one that could be creepy potentially, but here as well, all they do is take your friends emails, find other social services on the internet associated with those emails, and display the names of your "friends" (totally public) lists of friends.

This is something you could easily do manually with any search engine.