Facebook did not require express consent for apps to collect data from an app user’s friends, as it viewed being a user of Facebook as enough consent to take their data—even if the friends had no idea the app was harvesting their private data. The average Facebook user has somewhere between 150 and 300 friends.
