>The people in someone's address book did not click the button to allow their info to be collected. Only the person using the app does that. So that function should not even exist in the API.
API's don't work like that.
Just like a gun, they are only dangerous if used badly.
Example A user manually clicking on their address book to select a user to share with one of their friends would use the same API functions that the scrapng code they would use to get the same information that was scraped.