There's been a lot of discussion in the Cyberverse recently regarding Robert Scoble and Facebook. Robert lost his Facebook account (he got it back after appealing) when he violated Facebook's Terms of Use by using a program to "scrape" (download) Facebook data -- specifically, his "friends" list. Facebook’s Terms of Use "broadly prohibits the running of automated scripts on the site."
Here's what Robert was trying to do:
I was alpha testing an upcoming feature of Plaxo Pulse .... It is a Facebook importer that works just like any other address book importer.
What does it collect?
Names and email address and birthday.
It did NOT look at anything else. Just this stuff, no social graph data. No personal information.
I wanted to get all my contacts into my Microsoft Outlook address book and hook them up with the Plaxo system, which 1,800 of my friends are already on.
It’s ironic that you can import your Gmail address book into Facebook but you can’t export back out.
I sympathize with Robert's plight; I recently triggered a "bot sensor" myself on a site. (I wasn't even using a program, just looking at a lot of pages in sequence!.)
But what's interesting to me is that most of the discussion doesn't surround Facebook's policy or whether they were within their rights to turn off Robert's account, even temporarily. Much of the discussion concerns whether Robert Scoble had any right to the data he was "collecting".