I agree, when private information is given to somebody else, you cannot count it will stay private forever. The company can be sold, governments can ask for the data, a cracker can take it. So, a good recommendation is to act as Facebook updates are public, even if they are not.