There are tools that show you when permission was last used by an app.

I've had the official facebook application installed for months and they never read the SMS messages.