Earlier quoted context omitted.
It's not that my friend gave my info to someone else. My friend allowed the app to ask Facebook information about me. In the end, it's still Facebook who handed over my data. That my friend decided that was OK doesn't change much.
As I understand, it was a browser extension which scraped data off the Facebook pages visited by users. There is no way Facebook could reasonably detect or combat that.
That is false:
https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...