[draven]

IIRC the friends list is in the default app permissions, and calling the graph API only returns the friends on your list who also gave the same permission to the app.