I fired up Apple's iPhoto Uploader for Facebook, and I hadn't done so before so had to connect the app with my Facebook account. To do so you have to give permission to the app to do a variety of things (see photo), maybe. Although presented here in a nice visual list, this seems to be the standard list of things you have to give every app in Facebook when you want to use it (so I use practically no apps).
The list is insane.
iPhoto Uploader doesn't need to do any of those things. Does this mean it is going to? Or it might? Or is it just standard boilerplate and it will only upload photos and nothing more? Standard boilerplate would make the job of the people at Facebook a lot easier -- "Just use this text, the lawyers approved it, no app does all that, most do very little." But it's not at all clear what iPhoto Uploader will do, and I just said it could do all of those things.
I don't want it to, and it doesn't need to, post to my wall, access any of my information, access relationships, and it certainly doesn't need to access my friends' information. No way no how. And really it shouldn't, that would be a ton of info that I don't think Apple needs, although in this age of data mining who knows. All it needs to do is access my Facebook photo space to upload photos.
Edit: Oh look at that. "New Facebook privacy breach involves apps leaking user data," at boingboing.