The app developer at the heart of the Facebook privacy scandal says the social media giant didn’t enforce its own rules