Facebook literally had a box on their web site asking for your email address and email account password, so they could log in to your webmail and scrape your contacts.