... then why is it ok for facebook to have all of that same information ?
Stopped using Facebook auth a long time ago for this very reason and revoked access to all apps except those that I trust. There's no reason to share my entire Facebook account with everyone out there, and if that's the only way I can use their service, then I just won't use it. No big deal.
(2) He gets to decide that, not you.