I would think it would have to be "authorized access" according to the scope of the FB ToS.

Which makes a fair bit of sense, because having an app do it would go through FBs own privacy control schemes.

So I guess we also have to make sure that employers can't require prospects to install apps. :/?