For an example of best practice with Facebook app data access have a look at the Guardian. Nicely minimal: