Don't give your friends the debug APK file. Instead, create a release key and sign your APK properly first. The debug key is time-limited, and if your friends use that key, then when the debug key expires (usually a year after you first started eclipse/ADT), they can no longer upgrade the app, and all their data is lost.
There is no cost, to signing your application, and it only takes a few minutes to set up. There's no reason why you wouldn't sign it.
Further, your friends will need to enable "Allow Installation from Unknown Sources" on their devices.