Rules do run on silent authentication please make sure that is enabled in the Advanced Section in Account Settings
![alt text][1]
However, custom database scripts will not execute on silent auth, which is why any additional profile information should always be fetched in rules.