EEPROM 93C66 dummy bit problem?
We use the 9346 on several of our products, and it has this same dummy "0" devil thing. 

I think the reason it does this is that it needs to have the last address bit (A0) clocked in before it reads the data and begins to clock out the requested data. If you look at the datasheet, You can see that the Dummy bit overlaps the A0 address bit.

You can fix this by fighting fire with fire :-). Add your own dummy devil bit to the end of the address word (Make the Length one longer), so that your SPI port ignores that first bit of the response, and begins clocking the response at the correct boundary. 

Also, I always need to look closely to see that my CPOL and CPHA settings are correct. Sometimes things almost work when these settings are wrong, but are off by one bit (wrong CPHA), or sometimes just unreliable (wrong CPOL).