Yes, Facebook deserves blame for automatically sending all those things to them, even if an app only wants to provide optional Facebook login for users who opt in.

However every app vendor by now should know that Facebook is hungry for data and careless use of Facebook software is to blame in them.

As is Apple (and Google) to blame for providing no privacy measures for users.