These are the permissions Facebook app has on Android devices:

Device & app history:

Retrieve running apps

Storage:

– read the contents of your USB storage
– modify or delete the contents of your USB storage

Location:

– approximate location (network-based)
– precise location (GPS and network-based)

Phone:

– write call log
– read phone status and identity
– read call log
– directly call phone numbers

Microphone:

– record audio

Identity:

– add or remove accounts
– read your own contact card
– find accounts on the device

Wi-Fi connection information

– view Wi-Fi connections

SMS:

– read your text messages (SMS or MMS)

Calendar:

– add or modify calendar events and send email to guests without owners’ knowledge
– read calendar events plus confidential information

Contacts:

– read your contacts
– modify your contacts
– find accounts on the device

Device ID & call information:

– read phone status and identity

Photos/Media/Files:

– read the contents of your USB storage
– modify or delete the contents of your USB storage

Camera:

– take pictures and videos

Other:

download files without notification
receive data from Internet
adjust your wallpaper size
control Near Field Communication
create accounts and set passwords

toggle sync on and off
view network connections
send sticky broadcast
change your audio settings
set wallpaper

reorder running apps
modify system settings
read sync settings
install shortcuts
prevent device from sleeping
connect and disconnect from Wi-Fi

pair with Bluetooth devices
run at startup
read battery statistics
full network access
control vibration

expand/collapse status bar
access Bluetooth settings
draw over other apps
read Google service configuration
change network connectivity