He was in control of the data and then he relinquished control of the data when he shared it with facebook (and google, twitter, github and HN).

Trusting facebook to prevent Eve from accessing to your data is not the same thing as controlling Eve's access to your data.