Facebook Gave Data on Users' Friends to Some Firms While Barring Others