This is what I find difficult about these things, we (mostly) intuitively know that some cases it's okay to use information about users to tweak their experience, while we also know that what Facebook/Google/etc are doing is absolutely wrong.
The big question is, where do we draw the (legal) line?