A bug that Facebook discovered in its photo API may have permitted some third-party apps that you granted permission to access your account to also retrieve photos which you uploaded to Facebook but chose not to post.
A bug permitted apps to access photos you uploaded to Facebook but chose not to post
