Generally, I ask for access to the user's data at any time (even when they're not logged in) for flexibility. There are some situations where you need access an

Generally, I ask for access to the user's data at any time (even when they're not logged in) for flexibility. There are some situations where you need access and the user is either not presently using the website or Facebook isn't properly detecting them. I'm normally not worried when a legitimate company like Groupon asks for permissions like these.