It's just ridiculous that they had it open for 3 years, didn't have proper metrics so don't know exactly how many were breached, but there estimate was 500,000 and they didn't disclose???
C'mon Google, why'd you have to try and hide this...
Android 6.0 was the first version to implement permission control. Looks like this guy was running 5.1, so we at least know how Facebook got access to that info.
I'd argue however that Spotify's song recommendation engine is one of its differentiating factors. I'm always hearing friends rave about how much they love each weeks discovery weekly playlist.