Facebook sucks when it comes to privacy. They walk the fine line between exposing all they can and pissing off your customers more than they should. I recommend you look into this script to help you verify your settings are properly configured.