Facebook flaw gave 5,000 developers access to users' data

Information from users' profiles was accessible after the 90-day time limit had expired

Facebook has admitted that it accidentally shared user data with developers for longer than it should have.

Facebook apps are supposed to prevent access to personal data if users have not used the app for more than 90 days. However, the social network has said that a flaw in how inactivity was recorded allowed approximately 5,000 developers to collect data from users’ profiles after the 90-day time limit on their rights had expired. 

“Recently, we discovered that in some instances apps continued to receive the data that people had previously authorized, even if it appeared they hadn’t used the app in the last 90 days,” Facebook admitted in a statement.

Advertisement - Article continues below

“For example, this could happen if someone used a fitness app to invite their friends from their hometown to a workout, but we didn’t recognize that some of their friends had been inactive for many months. 

“From the last several months of data we have available, we currently estimate this issue enabled approximately 5,000 developers to continue receiving information - for example, language or gender - beyond 90 days of inactivity as recognized by our systems.”

Facebook says it fixed the issue the day after discovering it, adding that it plans to investigate the slip-up and that it will continue to prioritize transparency with respect to any major updates. It has not stated how many users had their personal data scraped.

Advertisement
Advertisement - Article continues below

In 2018, the Cambridge Analytica privacy scandal exposed how third-party apps were harvesting Facebook users’ personal information. Cambridge Analytica’s app harvested the data of users who interacted with the app, as well as their friends who had not consented to the use of their data. 

Advertisement - Article continues below

Following the US Congress’ questioning of Mark Zuckerberg in 2018 on how Facebook dealt with users’ personal data, the company established the 90-day lock-out policy for apps that year. However, the lock-out did not work as intended.

A company rep stated: “We haven’t seen evidence that this issue resulted in sharing information that was inconsistent with the permissions people gave when they logged in using Facebook.”

Facebook has also simplified its platform terms and developer policies to provide clearer guidance on data usage and sharing, as well as respecting users’ privacy when using its platform.

Facebook stated: “These new terms limit the information developers can share with third parties without explicit consent from people. They also strengthen data security requirements and clarify when developers must delete data.”

Featured Resources

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Remote working 2020: Advantages and challenges

Discover how to overcome remote working challenges

Download now

Keep your data available with snapshot technology

Synology’s solution to your data protection problem

Download now

After the lockdown - reinventing the way your business works

Your guide to ensuring business continuity, no matter the crisis

Download now
Advertisement

Recommended

ByteDance investors value TikTok at $50 billion in acquisition bid
social media

ByteDance investors value TikTok at $50 billion in acquisition bid

29 Jul 2020
Big tech antitrust investigation report expected by early fall
Policy & legislation

Big tech antitrust investigation report expected by early fall

24 Jul 2020
Facebook Messenger now features its own lock
facebook at work

Facebook Messenger now features its own lock

22 Jul 2020
Stop Hate for Profit calls on Facebook to address hate on the platform
social media

Stop Hate for Profit calls on Facebook to address hate on the platform

6 Jul 2020

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

3 Aug 2020
Labour Party donors caught up in Blackbaud data breach
data breaches

Labour Party donors caught up in Blackbaud data breach

31 Jul 2020
How do you build a great customer experience?
Sponsored

How do you build a great customer experience?

20 Jul 2020