I log into the Facebook app on my Blackberry. I can see my friend's data in the same way I could as if I used the Facebook website. The only difference is that

I log into the Facebook app on my Blackberry. I can see my friend's data in the same way I could as if I used the Facebook website. The only difference is that the app on the phone has been coded by Blackberry, and the JavaScript code in my browser has been coded by Facebook, except of course for the banner part that my ISP injected, or all the JavaScript code that third parties injected, and who are thus functionally equivalent to the code written by Blackberry. In this scenario, no third party had access to anyones data, right?