I would think you were right if it were not for the fact that the email was sent to an email address that I have not registered with Facebook. That means that they can't have identified my Facebook profile and must have been going off on the presence the email address used in the address books of those people in the email.