They can't. You have to explicitly give apps permission to access your photo library.