Here is the facebook announcement,
<a href="http://developers.facebook.com/news.php?blog=1&#38;story=355" rel="nofollow">http://developers.facebook.com/news.php?blog=1&#38;story=355</a><p>Applications can request you to share email addresses explicitly via their "extended permission" api...<p>Its upto the user to share or not...