From Facebook doc :
Sandbox Mode
When testing your apps, place them into Sandbox Mode. This hides your app entirely from all users who you have not authorized in the developer app to see the app, for the roles described below. Please note that when your app is in Sandbox Mode, you cannot call any API calls on behalf of users who cannot see your app.
But it's not the issue if is off.