Universities and think tanks have internal review boards for a reason. The fact that Facebook can make use of its users' data in other (business-related) avenues does not excuse them from the most basic of research ethics.

It did pass the muster of Cornell's review board, but that was after the data was actually collected, which amounts to ex post facto approval.