They have access to your stuff, and they signed away access to the stuff that they have access to when they gave such and such app permissions. It's like if you

They have access to your stuff, and they signed away access to the stuff that they have access to when they gave such and such app permissions. It's like if you loan your house key to a friend and they make copies of it and give it to all their friends. It's hardly the lock-maker's fault or the lock's.