To be eligible for the bounty, the offending app must impact more than 10,000 Facebook users and show
a clear pattern of abuse and not «collection» (in this case, I'm assuming abuse would qualify as transferring the data to a third party without permission).