Yes, there's harm to Facebook, the other users whose data is scraped, and probably to organizations advertising on Facebook. The masses of users and organizations are unlikely to be aware this is going on or to be able to organize and sue the extension makers.

These extensions are made by shitty companies using shitty practices to make money. If current legal frameworks aren't well suited to deal with it, that doesn't make them any less shitty.

These extensions are made by shitty companies using shitty practices to make money by "stealing" data from a shitty company with shitty practices to make money.

You're just a pawn sitting in the middle while the parties to this fight over who gets to exploit you most effectively. The only positive outcome here would be if the courts hugely overstepped their mandate and told everyone involved that this data shouldn't be available at all, you have to destroy it now.

Sure, but doesn't the TOS harm the user by restricting their access to their own data? Facebook might have a case but you can't possibly paint them as a victim here.

The issue not so much the extensions scraping the individual user's own data (or data about them) but scraping data about advertisers and about other users.

Facebook is harmed through resource consumption by the scraping, the infringement of any copyrights they hold on what's scraped, and potentially harmed in their relationship with their advertising customers and their users.

How bad Facebook's own practices are is irrelevant to the issue of what these extension makers have done. Dirtbags have rights too.

With as little respect I have for Facebook, and how reluctant I'd even be to defend them, your last sentence, "Dirtbags have rights too." is an attitude I think we all should stand to live up to these days.

I agree with your last statement that dirtbags deserve rights too; however, companies should not have rights on par with civilian rights at all. Hell, I'd like to write up a TOS they implicitly sign by taking on my business. ...while we're on the subject of normativity, anyway! :)

The users of the extension have access granted to those friend groups by the owners of those groups. Through that access things get saved. Consent was given...

Consent, perhaps, but not a license for using the data.

Which if you think it through means that the friends might have legal standing to sue the user of the extension.

Not to sue Facebook or the extension author and definitely not for Facebook to sue the extension author.

Right. It's as if it is essentially a hacking tool, since the user of the extension would seemingly be violating the FB terms of service.