So, my understanding is that Facebook happily scrapes users' contact lists from their app. How exactly is that legal, and this not? The most obvious difference is that Facebook likely claims users are informed of Facebook's scraping, but I'm sceptical of the number of people who actually understood that. If these extensions said in their ToS that they did this, would it be okay?