We're working on a writeup that I'm pretty excited about --
Importing your address book to find friends is common for social, but it's insecure to enumeration attacks and database leaks so we've historically refused to implement it. The team has a proposal now that we think solves those risks.