In the uproar that ensued after it was revealed that Cambridge Analytica collected the data of around 87 million Facebook users, some of the social media site’s customers downloaded all their Facebook data to see just what personal information it held. What some users found led to even more outrage. Among the usual Facebook content of personal posts and friend requests were also the metadata of their SMS texts and calls.

Facebook has publicly stated it always asked for consent before collecting such information from users. On April 4, the social media company also changed its policy to delete all collected SMS and call logs older than one year. But the way in which consent was requested and gained to collect SMS and call log data has privacy advocates crying foul, and it may lead to legal liabilities for the social media company and Google’s mobile operating system Android.