Facebook admits: Apps were given users' permission to go into their inboxes

Only the inbox owner had to consent to it, though... not the people they conversed with

Facebook has admitted that some apps had access to users' private messages, thanks to a policy that allowed devs to request mailbox permissions."