This is a good point actually. Where I am there is actually an nhs trust where parents have liked a page or interacted with it. Of course, some of them whilst giving photos to said page would also have had to consented to this under privacy/GDPR rules. But the moment that parent does (perhaps as you say; intended as a support page), you then see those parents (particularly if your also part of that same page as a member of staff) coming up as having “interacted” in some way with the page/group.I would like to know a lot more about this searching and what it comprised and how many others names or data was searched. Where was she getting the info from? Using their names or email addresses or mobile phone numbers to search for accounts?
Is it possible the hospital itself or the unit or ward has an FB presence / 'check in' so the parents themselves may have liked or followed a page or joined a support group or charity connected and she's seen their info there? Maybe they donated to a fundraiser or something? I can't imagine going on FB would be in your mind if you've just had a premie but hey who knows.
Surely 'looking up' parents would be a very hit and miss event anyhow and not actually result in seeing their FB pages?
Having said that, even then, unless “friended” on sm it would still be quite hard to believe she would get information alone on there from every single parent in the case. Surely at least “some” of them would have privacy settings on even in 2018, A-Q is an awful lot of cases.