Facebook was either being naive or looking the other way- many third party app developers probably never intended to obey the rules. Too much money to be made. The people running Facebook aren't stupid, so I'm guessing "looked the other way." Now, as always, they need to handwavedo damage control, and wow, look how quickly the suspended companies were reinstated.

I've certainly never trusted the third party app developers (or FB itself) to keep anything private.