It depends. For a while, Facebook was very lax in what kind of data is shared. Around the time when Farmville and related Flash games were very popular. It coincides with the initial round of mobile phone apps. I think people didn’t really have a social norm back then. It’s very easy for an app to ask for all the permissions and have the user accept it.