I gave the guy all those details and pics while authorizing the app! There's no way too see those things without being my friend.
Speaking of which, how many of your FB friends would grant ~impersonation~ rights to an app without lots of thoughts? And - could that app then, using your _friend_ as proxy, play this particular game of fear with you?