Trust is the only reason. I'm sure there are plenty of people who are examining the traffic of Facebook apps and someone would make a sink about it if there was evidence they were lieing about their privacy policy. That seems like an adequate assurance for most people but certainly not all.