While I haven't looked into this particular scenario. You used to be able to revoke individual permissions per app / site on FB. It's under Privacy > App & Sites, obviously it defaults to on as it's convenient for the site in question. An entirely different debate.