If they do any sort of Facebook login/auth, frequently facebook will require them to send them data about who is using their site.