I believe by using Dr. Kogan's app and explicitly giving Dr. Kogan permission to use your data (by accepting the FB interstitial UI that confirms with you as a

I believe by using Dr. Kogan's app and explicitly giving Dr. Kogan permission to use your data (by accepting the FB interstitial UI that confirms with you as a user whether you would like to give a third-party access to your FB data via the FB API), you are entering in some kind of contract with him, no? FB doesn't just hand users' data over without user confirmation... Users see UI permission dialogs and have to explicitly agree to it first (similar to an iPhone app asking for permission to use your microphone or location -- how is Apple responsible if said app gets hacked and leaks your microphone recordings?).