Delete or disable Facebook and just use the website version in the browser if you must be on it.
Hacking is actually very hard to do. Unless you give your friends your phone all the time and someone physically installed something. That would be the only relatively easy way. And then maybe they aren't really your friends. That's when you go to the police.
Do they work for the NSA, or Russian or Chinese governments?