Some services give it regardless of whether it's asked for - I'm specifically thinking of facebook here. I've done a couple of prototype apps with "login with

Some services give it regardless of whether it's asked for - I'm specifically thinking of facebook here. I've done a couple of prototype apps with "login with facebook" functionality. Regardless of whether our app requests it or not, facebook automatically says that we're requesting "access to friends list" - that's just one of the minimum levels of things you get, even if you don't want them, and there's no way to not get it.