The apps were using a common Web standard, known as a "referer, " which passes on the address of the last page viewed when a user clicks on a link.

WSJ: Facebook in Online Privacy Breach; Applications Transmitting Identifying Information