If you don't collect the data in one place, there's no chance of leaking it.

If they want to position themselves as the global phonebook, that's fine, but they should be open about that.

Edit to add: If you aren't in the "gather and sell access to everybody's data" business, "private" is a sensible default setting for that information. On the other hand, if you're Facebook...