Okay folks, flame away, but...
I think they might have a case here. Here's why:
--McDonald's DOES have "lost and found" policies in place. The manager did not have the right OR permission to look through the guy's phone once it was identified as his. He certainly didn't have permission to upload anything to any site. The fact that he did this on the clock makes McDonald's liable as he is a company representative, even if he is a 24-year old loser dipshit (guessing, of course). Put it this way--if I lose a wallet and I describe it, does that give someone the right to use the credit cards, cash, or license it might contain?
That being said, if you're going to send pics of naughty bits to someone or save naughty bits of someone else, a little caution is in order. Don't be leaving said devices around where anyone can just pick them up.