The update for the popular Android app demands access to SMS and MMS messages, the new version of the app was recently released. The Android engineer at Facebook, Franci Penov, provided an explanation on Reddit, revealing that the application of the popular social network needs to read messages to implement automatic two-factor authentication. Android does not allow permission requests on demand; we have to request all permissions that cover each feature at install time, and the users can only grant or deny all of them and have no control over individual permissions.”]
Source: http://securityaffairs.co/wordpress/21874/malware/facebook-android-app-reads-sms.html