Facebook's servers check your relationship to the target user before sending any data to your screen.
Common "Who viewed my profile?" apps are flagged by organizations like the Better Business Bureau (BBB) as scams designed to compromise account security. Risks of Downloading "Viewer" Software facebook private profile viewer download full
Short answer:
: You can often see private users in photos tagged by mutual friends who have public settings. Facebook's servers check your relationship to the target