> then why is it okay for a single company to have that access?

I'd say it's not ok, but people keep on giving Facebook all that information (and it's very tempting to do so). There are technical solutions which anonymize/privatize social network information, and then no entity has such access.