In fact, they can expect very serious investigations throughout Europe if someone complains about it to their local information commissioners or equivalent here.
If they are in fact sucking in contact details from users phones and using them for matching and recommendations, that would seem to be something that would be serious enough to likely require express consent (in other words: users taking an explicit action, rather than being "opted in" implicitly by agreeing to a TOS or similar) under EU data protection regulations.
Not a lawyer, but I'd be surprised if there isn't one or more data protection violations lurking in there somewhere.
If they are in fact sucking in contact details from users phones and using them for matching and recommendations, that would seem to be something that would be serious enough to likely require express consent (in other words: users taking an explicit action, rather than being "opted in" implicitly by agreeing to a TOS or similar) under EU data protection regulations.
Not a lawyer, but I'd be surprised if there isn't one or more data protection violations lurking in there somewhere.