Earlier quoted context omitted.
That is what I thought also but how did CA get this friend data?
They got it by using the same technique that Obama did in 2008 and 2012. They got one of your friends to authorize their app, and then they were allowed to access most of the data about your friends that you could access. The only difference between CA and Obama is that Obama’s app was given special permission to blow through data collection limits enforced on all other apps, such that even though less than 1 million…
(a) This was 8 and 4 years earlier. A lot changed in that timeframe. While, yes, there were always concerns about privacy, the string of data leaks, and the increasingly obvious power of statistical methods for targeting, have had a strong effect on the general public's attitude towards the practice.
(b) The Obama campaign did not break their contract with Facebook. Facebook did apparently turn of their API limits, either because of sympathy or because that's just what they did for big clients back then (FarmVille got the same privilege). But in the end, it appears that nobody broke any rules back then.
Now this probably won't convince everybody. So let me say this: even if the reaction now is hypocritical, it seems everyone agrees that the current outrage is justified. If so, it would be foolish not take action now just because "your team" got caught while the other got away. After all, the chances of each party being advantaged by such practices going forward seem to be exactly equal.
(Not to mention the vastly larger universe of threats not involving the two US parties)