That's not the point. Your friend made a decision to share their private data with you using Facebook, knowing that it was Facebook that would be holding the sensitive data. You are talking about sharing that data with other organisations, which your friend has no control over. The point isn't whether or not you trust those organisations, it's whether it's abusing the privilege of having access to your friend's data to spread that data around where they don't control it any more. I think doing so is, at best, a betrayal of confidence.

(Edit: And in answer to your other question, about which organisations I personally can trust, we have fairly strict laws in my country about privacy and data protection, which limit what any of these companies may legally do and give me various rights with regard to any personally identifiable data anyone holds about me. I don't think those laws go far enough, but IMHO they're certainly better than the free-for-all you seem to want. So I can have some confidence in how my data will be handled by any company operating in our jurisdiction, which immediately makes me more likely to trust them than US-based companies like Facebook and Google whose business models fundamentally rely on undermining privacy in ways that are rarely going to be in the interests of the exposed.)