Surely this can be said of any application that you give such permissions to with OAauth? We've already seen cases of people selling the information they gathered.