The social media giant is accused of not informing 20 million users it had access to their photos.