[thinnerlizzy]

I’m going off memory too, but I think that besides the name and profile photo of your friends (and email address?) this API didn’t return much else. And I also think I remember that the amount of your data that would turn up in a friend list API call was limited in some way by your own privacy settings.

In our circle around that time people were calling out apps that required these permissions and recommending that users not authorize them if it was not obvious why the app would require that kind of data. John Gruber comes to mind as one of those people. These calls for caution were not in the mainstream though.

Edit: I believe this API contained info like favorite tv show or band if those fields were filled out in your profile, but again I’m fairly sure that your own privacy settings could have limited this if you had them set to draconian levels. So in other words, yes this API was limited to publicly available data, more or less.