Everyone involved did not give their consent, as Facebook claims.
From a statement on Facebook on this ongoing scandal, they write: “Update on March 17, 2018, 9:50 AM PT: The claim that this is a data breach is completely false. Aleksandr Kogan requested and gained access to information from users who chose to sign up to his app, and everyone involved gave their consent. People knowingly provided their information, no systems were infiltrated, and no passwords or sensitive pieces of information were stolen or hacked.”
The statement is misleading, because the “app” got information not just from people who consented to using it, but all of their contacts as well i.e millions of Facebook Users. These millions of people did not give their consent.
Facebook is trying to hide from their embarrassing situation regarding a company that Steve Bannon started and which Trump’s campaign had involvement.
Facebook’s response is posted here.