We can assure you from our side, that the way the app is structured, no part aside from login, uses facebook's user ids. We've tried to be very strict about that.
Am I wrong to assume that this ability might enable de-anonymization of postings after a server compromise?
In case of a complete server breach, that would indeed allow for de-anonymization of posts.