The research is by teams at those universities whose networks were observed, not some outside group. There’s an entire section on “Ethical Considerations” in the paper that details what they did (and did not) collect. Like any research involving human subjects in some way, their methodologies were reviewed by their respective university institutional review boards (not that those are necessarily perfect).
