Facebook says it mistakenly let 5,000 developers gather information from people’s profiles after a time limit on their rights had expired.
Apps on Facebook are supposed to be prevented from accessing people’s personal data if the app has not been used for 90 days.
But Facebook said that lock-out had not always worked due to a flaw in how it recorded inactivity.
“We fixed the issue the day after we found it,” the company said.
Facebook has not stated how many users had their personal data scraped.
The harvesting of Facebook users’ personal information by third-party apps was at the centre of the Cambridge Analytica privacy scandal that was exposed in 2018.
Cambridge Analytica’s app on Facebook had harvested not only the data of people who interacted with it, but also that of friends who had not given consent. The company built a vast and lucrative database in the process.
Facebook’s chief executive Mark Zuckerberg faced questioning before the US Congress on how his company dealt with users’ personal information, and Facebook brought in its new policy on 90-day lock-outs for apps later that year.
But Facebook now says the limit did not work properly.
“Recently, we discovered that in some instances apps continued to receive the data that people had previously authorised, even if it appeared they hadn’t used the app in the last 90 days,” the company said in a statement.
Facebook gave an example of the error in action. It said that if two Facebook friends had both used an app, and only one was still using it after 90 days, the app might gather personal information from the inactive friend.
“For example, this could happen if someone used a fitness app to invite their friends from their home town to a workout, but we didn’t recognise that some of their friends had been inactive for many months,” the company said.
In that example, the home town of a user would be the personal information in question. Facebook cited language and gender as other examples.
The company said its estimate of 5,000 developers was only based on data available from the last few months.
But it also said that the information handed out, even if it was after the time limit, was only what users gave permission for when they signed up to the app in the first place.
In the same blog post, Facebook also announced that it was changing its platform terms and developer policies “to ensure businesses and developers clearly understand their responsibility to safeguard data and respect people’s privacy”.
The faulty time limit in this announcement is the most recent in a long line of privacy issues for the social network.
In November last year, a flaw in Facebook’s Groups feature was revealed. It allowed the harvesting of some personal data from groups.
Figures announced in January showed that Facebook’s annual profit fell in 2019, for the first time five years – partly due to settlements with regulators over privacy concerns.
- One feared dead, several others injured after accident at Legon underpass
- Citi FM journalist, Caleb Kudah allegedly picked up by National Security operatives
- Leadership crisis at Ghana Rugby: Chairman Herbert Mensah suspended indefinitely, set to be removed from office on June 8
- Former British High Commissioner to Ghana, Craig Murray jailed for contempt in the UK
- Fire guts new Kejetia Market
- Ghana drops to 95th in 2021 World Happiness ranking
- NSMQ 2021: Tamasco and 3 others secure tickets to Accra on day one of Northern Regional qualifiers
- Dr Mavis Owureku Asare: Wesley Girls’ no fast policy is not about religion
- Chinua Achebe’s ‘Things Fall Apart’, ‘No Longer at Ease’ and ‘Arrow of God’ are being adapted for television
- Our scholars in Cuba are broke because they insist on table-top payment – GNPC Foundation
Nursing aide gets 7 life terms for killing 7 elderly VA patients with insulin
Ghana to host African Swimming and Open Water championships
Chief breaks ground for multipurpose Nkawkaw Palace
Double whammy for Ghana in Old Mutual Amazing Voices
RTI Law is to empower citizens and to fight corruption – RTI Coalition
Mental disorder after childbirth is real – Victim recounts
Transgender Cameroonians jailed for 5 years
Dr Prince Hamid Armah: Exploring Akufo-Addo’s commitment to education; Policy, spending, and outcomes
Politicisation of security agencies cause of insecurity in the country- Sam George
Museveni takes oath for 6th term
Ghana has not done enough to get girls out of the streets – Development consultant
China’s population grows to 1.41 billion people
Uganda deploys troops ahead of Museveni inauguration
Banks cannot be blamed for not accepting new Voter ID cards – Association of Bankers
9-year-old boy dies after being ‘struck by lightning’ on football field