I guess NYPD's way around people that don't make their profiles fully public.
It would be interesting if Facebook is willing to punish/ban/etc not just the companies directly doing this, but their clients as well.
It isn't just the NYPD that does this, it's advertisers, data mining companies, financial institutions, employers, nation-states, ex's, stalkers, etc.
It's cheap and easy to do, so why wouldn't organizations mine that data that have the resources to do so?