Did FB ever take any legal action against Cambridge Analytica? I can't remember anything about it and this sounds very similar to that (although back in those days FB's tools made this incredibly easy).
Namely, CA didn't resell the data or give it to an ad agency.
[1]: https://web.archive.org/web/20180329131546/https://developer...