In the social network, a user can invite another to be friends.
Once connected as a friend each user of the relation have access to the shared profile of the other user.
There should be an indication that when you accept someone as a friend you give him/her access to personal data (may be have the list of field the other user will have access to).
It can also be indicated in the general terms and condition of the plateform but it would be good to have it clearly stated to the user at the moment of acceptance of a friend, or on the page with the list of invitation.