[Ruphin]

When consenting to 'upload my contacts from my phone', I think very few people will interpret that as 'upload my complete call and text history'. Is it the user's fault for assuming Facebook is doing what it says it is? Should the user assume that they are being lied to by default and embark on a research project every time they want to use a product?

If Facebook presents the user with an alternate simple-to-understand representation of their EULA, it their responsibility to be fair and honest in this alternate representation. I think it is completely fair to blame them for failing to do so.