I don't think it's fair to put the blame on the company because users are naive enough to think that candy is perfectly fine and healthy to eat. People aren't clueless to the idea that companies are selling their information and their behavior is constantly be tracked. Was it Facebook's responsibility to display to show "Are you REALLY SURE you want to agree to this?"

If it already warned them prior to taking the quiz and they still said yes, I don't understand how they shouldn't be held accountable for this too.