Get a less intimidating facebook authentication permission list

Question

My Facebook app's authentication dialog says:

[Application name] would like to access your public profile, friend list and email address.

I don't want or need to read the user's friend list, and this seems like it might put people off using it. I only use the app for authentication, with just the email permission.

When I debug the token, it shows only email in the scopes field. Yet when I use that token in the Graph API Explorer, it does show me a list of friends. I assume the friend list is included by default now, but I'm hoping it can still be disabled somehow.

How can I get the friends list out of the authentication dialog, or else explain that I won't use that information? This has been asked before, but that answer no longer applies.

Answer 1

Sorry but you cannot. Quoting from the documentation,

When a user logs into your app and you request no additional permissions, the app will have access to only the user's public profile and friend list.

These permissions will be by default added to your application, what you do of this is your choice.