Facebook's rules for accessing user data lured more than just Cambridge Analytica