That's certainly a possibility, but is it possible for other (malware) apps to scan private facebook posts? This was not a sms or anything like that, but a regular private facebook post made from her computer.