Its not unexpected, but still alarming given the recent news on how and the extent to which third party apps are mining your data/sending targeted ads/manipulating people with data that's given for a benign purpose like inviting friends from your contacts (Trojan horse).
As I understand once some app gets your data, is USA there is a freedom to do whatever the company wants, and sell or share them with anyone including the governemnt.
At least Wikipedia says [1]:
> In general terms, in the U.S., whoever can be troubled to key in the data, is deemed to own the right to store and use it, even if the data was collected without permission, except to any extent regulated by laws and rules...
