Before the CA incident became big actually. Most of the APIs used by Cambridge Analytica (in particular, the ones that let apps access data about a person's friends) were removed all the way back in 2014.