There is no source, because it's bullshit. FB has never sold access to their API. Access to the friend's data permission, like all other permissions, was free.