If you search for Facebook on Google Play then you'll see the word "free" under Facebook icon [1]. It is interesting ,that the app page [2] doesn't have this word, but it doesn't say that Facebook is going to upload your call list to the server either. So they advertise the app as "free".
Google asks devs how much an app costs to install not to use.
Even if the app has IAP the value gets rendered as “Free” with an additional notice.
On that note Google will also take down your app if it doesn’t have a comprehensive privacy policy. And it also requires that policy to be accessible without installing.
They’ve been cracking down on things as detailed as “leaking” clicked URL in troubleshooting logs.
I’m not here to astroturf for companies abusing jargon filled pages of legalese to get you to sign over rights to your data, but you don’t even need to read those to know: “If you’re not paying, you’re the product”. Doubly so if you’re using a service valued at billions of dollars.
Where do they come out and say that? Where do they put a message, in readable english, and not buried under a thousand other things, that says they'll do that?
I agree privacy policy details are opaque, but it takes the bare minimum of skimming to know if the policy is not giving up your data.
It should be clear as day what’s being collected and it’s a failing that it’s not, but there’s also the old adage of “if it’s too good to be true...” doing some due diligence when you’re promised the services of a billion dollar company that’s not charging you is prudent.
Allowing the app to access the contact list doesn't mean that the user allows to upload call history to the server. Maybe they only want to add one of the people from their contact list.
[1] https://play.google.com/store/search?q=facebook&c=apps&hl=en
[2] https://play.google.com/store/apps/details?id=com.facebook.k...