No they probably do not have the users Facebook password, but they do not need it for scraping, because they can just use their own use for that.<p>I have looked around on Facebook and it looks like one can see other users friend list, even if you are not in their immediate network.<p>Even if Facebook has a limitation, like you can only see the friend list of friends of friends the company behind this app could probably make some fake Facebook users and befriends someone on each university to get an ok coverage.