This [0] talk from Computer Chaos Club also points out how all applications that use Facebook as authentication option (or even without it) MUST send user data to Facebook Inc. This of course doesn't require a user to have a facebook account.

[0] https://www.youtube.com/watch?v=y0vlD7r-kTc