How are you even remotely surprised by that? If you are expecting any privacy or security from a combo of Facebook and Android, you've been asleep for the last 13 years.