Wasn't it WhatsApp that sent a key back to Facebook servers? Technically it's end-to-end encrypted, but Facebook could decrypt it if they really wanted to.