They're not third parties because these API's are protected by user login credentials as near as I can tell. That means you provide your login information, and

They're not third parties because these API's are protected by user login credentials as near as I can tell. That means you provide your login information, and your device can access your Facebook data, as you expect a client of Facebook to be able to do. That means all the privacy protections from the "website" are there, you're just not looking at it through a browser, it's an interface provided by the device manufacturer. What is there to be angry about?