>if Company B found another way to access the same information (ex: scanning physical phonebooks or asking people to sign up to their site) then I'd say they're within the law.

Company B has found another way. They are getting the data from Google's cache of the craigslist.

Padmapper is not touching Craigslist's servers at all.