The data is not anonymized. If you install an app that requests access to your data and the data of your friends, then it's not anonymized. How could it be? That company would have the exact links between you, under your real name, and all of the friends linked to you, under their real names.
Oh yeah, I know the data gathered through the API isn't anonymized, but I was referring to what they sell to advertisers who don't use the API and just do business directly with Facebook, unless they don't sell any data directly to advertisers and advertisers just have to put in place certain metrics for whom they would like to target.
Multiply this by a million.