[nikolayav]

Any service that uses any sort of contact importer will need your password if you would like to get any use out of said importer.

How can anyone read your GMail contacts without your logging into your account?

If the utility of this tool is lost on you even though this password is clearly not stored anywhere, you can manually go out and find on-Facebook friends yourself.

[roundsquare]

Here's one way. Its a bit more inconvenient, but I think its worth the inconvenience.

1) GMail has an export to csv feature. Export your contacts.

2) Facebook creates a "import contacts" feature. Import the list.

Done.

I can't think of any right now, but you may be able to come up with a feature that absolutely needs you to put in your email password. However, I suspect that by adding a little inconvenience, one can find a way around it.

[grncdr]

"How can anyone read your GMail contacts without your logging into your account?"

Google (and others) provide an API for doing this specifically to prevent users entering their passwords into 3rd party sites...

[qjz]

Are you seriously suggesting that visitors should supply email account passwords to any site that asks for them? How is Facebook different from any other phishing site?