I known a few people who gamed facebook's add system to "color" people's profile data into cookies, and also a couple of "quiz" app developers who had access to everything they could ask for at the time, and then some.

Not a single lawyer involved in either.