But if you need a refresher on how all the pieces fit together, this diagram helps make sense ... it exposed a loophole in Facebook API that allowed it to collect data from the Facebook friends ...