I wonder if they care. The amount of damage control Facebook has done in the wake of this has been pretty passive; as if they're saying "We hear you, but we're going to stay the course".
I'm extremely privacy-sensitive and nothing they've done has come close to shaking me off as a customer. Key detail about my use of Facebook: I don't publish things on Facebook that I'm concerned about, and I don't use it for work social networking.
Facebook does not sell private data. It never has. In fact, if Facebook's evil plan were to someday start selling private data, encouraging users to make their accounts more open would make this plan less effective: you can't sell public data.
By private I mean when I upload a picture and set the privacy to "only Bob" It makes me think that Bob is the only person who has access to this picture.
The words you typed were "sell private data." It is an inflammatory phrasing, that evokes clandestine exchanges of cash for information that users are assured is private. Since you apparently know it's bogus, please do your part in keeping discussions reasonable and stop spreading it.
FB will get a share of ad revenue from a 3rd party application that Bob installs. That application will have access to my picture that I set to "only Bob".
You can blame Bob for being the middle man, or me for not reading the fine print in the privacy policy, but at the end of the day FB is making money from "selling my private data"