Return to Answer

In simplest terms, it seems that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any serious app deployment on Facebook pre-2014.

In simplest terms, it seems that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any major app deployment on Facebook pre-2014.

In simplest terms, it seem that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any serious app deployment on Facebook pre-2014.

In simplest terms, it seems that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any serious app deployment on Facebook pre-2014.

In simplest terms, it seems that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any serious app deployment on Facebook pre-2014.

In simplest terms, it seem that the answer is that at most any information that a user had opted to share with his/her friends was available to Facebook apps prior to 2014.

The documentation for the "user" object under v1.0 of the Facebook Graph API can still be found on the wayback machine: Facebook documentation 2010. However there is some Javascript on that page that interacts poorly with Archive.org and/or my browser, so I've provided a screenshot of the first part of the table here:

This table continues for a total of almost 30 rows; in summary:

• all users' names, gender, locale, facebook id, and verification status are listed as "Publicly Available", meaning that the app would be able to harvest this information from all of the friends of anyone running the app.
• users email addresses, "bio" and "quotes" sections seem not to be available to apps run by friends regardless of user permissions.
• quite a lot of other info is potentially available, but sharing could be turned off by users in their privacy settings. (see this question)

So depending on user settings (and which fields they had filled out in their profile), the app could also potentially access users':

• birthday
• education and work history
• "about me" blurb
• hometown
• relationship status & desires
• religion & political affiliation

I'm not sure of the status at the time this particular app was active, as Facebook did modify privacy options over time, but I think that most of these permissions were "opt-out" ie. allowed by default. Also I believe at some point users were allowed to share these things with their friends but not with their friends' apps, presumably in order to allow users to address this use case while still being "social" with their friend graph.

I must say that the ability to build a graph of all this information linked to specific peoples' names, locales, and circle of acquaintances would be seriously enticing to marketers of any stripe, even if some of the information were a bit sparse due to users opting out. IMHO it is pretty naive to think that similar data dumps do not exist elsewhere; could be in the hands of just about anyone who was doing any serious app deployment on Facebook pre-2014.