I've seen this happen before... I've been working inside of a web application that has no explicit affiliation with Google/Facebook, and yet they can get my email address (since I am logged into Google/Facebook). Perhaps this is via G+ or something?
In any case, I'm building a web app, and am interested in accessing their email addresses (for identification purposes in my database) without having to prompt them to login or have any interaction with my web app.