Facebook has revealed which companies had special rights to user data. It seems there were 61 companies with temporary exemption to an app block, and 52 more authorised to "recreate Facebook life experiences."
It's all in a 748 page PDF published 29 June, 2018, as a result of the U.S. House of Representatives questions following the Cambridge Analytica debacle. There were over 2000 questions going back to April 10 and 11, 2018, so it's a weighty document.
There are some peculiar loopholes in the FB logic in today's report. Because the FTC 2011 Consent Decree required users' permission to share their personal data beyond their privacy settings, several devices were not considered "Third Party" in FaceBook's dealings. They partnered with device makers and classified them as "suppliers" rather than third parties. So it was OK to share all data with Samsung and Blackberry for example.