3 ms·

For one, Facebook obviously had access to contacts and photos, without any way for user to disallow it.