> That's getting close to paranoia.
Selling users' personal data to data mining and advertising companies is very common. It's not really paranoid to think that Facebook would do such a thing, considering that they call their users trusting dumb fucks and blatantly disregard their users' request for decent privacy.
> EU law is enough to keep you safe
Most of the times when an American Internet company have been challenged by EU law, the response from the company has been, "We're an American company, and our users uploaded their data to our servers which are placed in America." Then there's not much EU can do.