how to stop login button app asking for friends list permission

Question

I have implemented the facebook login button but im getting complaints from people saying the app is requesting access to friends list and because of this they dont trust it because they think the app will have the ability to send messages to their friends. I know that this isnt what the app does but the average user doesnt.

I have no use for the friends list. All i use is the email address along with the user id and username. This friends list access is there by default i didnt add the permission so i want to remove it because it took quite a bit of work for me to set all this up and its annoying to hear complaints about a permission request that i dont even require.

This is the code im using to get the info for the user from facebook.

require_once("facebook.php");
    $config = array();
    $config['appId'] = 'xxx';
    $config['secret'] = 'xxx';
    $config['fileUpload'] = false; // optional

    $facebook = new Facebook($config);
    $loginURL = $facebook->getLoginUrl(array('scope' => 'email'));
    try
    {
        $uid = $facebook->getUser();
        $details = $facebook->api($uid);
    }
    catch(Exception $e)
    {
        $uid =0;
    }

Answer 1

The basic permissions text is "APPLICATION would like to access your public profile and friend list." This is the default text to auth any app, even without any permissions added.