I posted a question yesterday re the use of facebook data (http://p.incontext.mobi/facebook-phishing-attacks-facebook-is-the-new). This article does answer a bit of things but we don't provide our credit card or bank account details in facebook.

Also read this http://www.priv.gc.ca/media/nr-c/2009/nr-c_090827_e.cfm