I worked at an e-commerce clothing store in 2011 that made it abundantly clear you would get your ass handed to you if you went poking around in customer records you had no business looking at for curiosity's sake. I currently work with an online game where I will get asked difficult questions if I can't justify why I'm looking at the in-game actions a player took without clear justification, and we have barely any PII on most players beyond IP address.

It would seem reasonable to squarely blame Flock for not absolutely centering this feature.