I would bold it if I were them. It's a nicely written message, but it reads like a lot of other PR apologies and it's easy to skim over it, deep in its position in the 5th paragraph.
Sometimes you need to make actions speak louder than words. :)
Sometimes you need to make actions speak louder than words. :)
Better would have been 'we are sorry we misused your phone contacts', rather than trying to make the users responsible by invoking their feelings.
Aside: interesting how the concept of theft seems meaningless when applied to copyrighted material, but meaningful when applied to private data.