Fun fact:

Tinder (as of my last login last year) displays an user liked pages along with their interests and then only their first name so that there is some "privacy".

I used to put all that data through Facebook Graph search and it would get me their full name and contact information, which in turn would lead me to their email address, which would lead me to their addresses or phone number.

Fun, fun time. It's a good thing that I am not the kind of person who would abuse of such things.

Mind-boggling indeed. I guess you could do worse by using your FB auth on Ashley Madison, but not by much.

> We are one FB bug away from some serious embarrassment.

FB has been squirreling away phone and credit card numbers for awhile, along with DoBs, family members, birth cities, and pet names (i.e. "answers to common security challenge questions"). I wouldn't be surprised if a lot of this information has already been stolen, and is being used for things worth more than a bit of embarrassment.

I believe part of what I'm seeing is a facebook bug. Namely, they are supposed to see me show up on Facebook, having given FB permission to peruse their contacts, but I'm not supposed to see them, if that makes any sense (permissions granted, and what not).