In principle this could be the first time Facebook actually just tossed database dumps at Amazon, and in principle Amazon might have abused the access to steal user data for themselves. But neither of those possibilities seem likely or are supported by the described evidence.
https://www.theverge.com/2018/12/18/18147616/facebook-user-d...
Allowed to ask the user? Can you unwrap that for us?
Back in the day, I was part of a team that built an app that used Facebook Connect/what they were then calling the "Graph API" for login, and our app certainly saved all the data that Facebook made available back into our own database.
> You may use Account Information in accordance with your privacy policy and other Facebook policies. All other data may not be transferred outside your app, except to your service provider (per, Section 3.7) who needs that information to provide services to your app. With the exception of Account Information, you may only maintain user data obtained from us for as long as necessary for your business purpose.
I imagine some smart lawyers worked pretty hard on that. I imagine that most companies have their own smart lawyers who write "[their] privacy policy" to say "we can do whatever we want with your data...to provide you better service." I assume that your app's backend is the "service provider" in question.
IANAL, but I read that as saying it's kosher with FB for your app to push data up to the mothership.
The phrase "for as long as necessary for your business purpose" sure sounds like "indefinitely" to me. Maybe my business is still hoping to make some money from that data?
A friend of mine wanted to remove her name from all social media, she said there's one site left that seemed to just mirror FB, and my name was on it too, it seemed the creator managed to download all the data accessible to apps and he even claimed making that site wasn't against FB's agreement...
So is this yet another case of the media being incapable of distinguishing between transferring of data to third parties and displaying data on devices as an agent of the user, i.e. for the purpose of providing an integrated facebook experience? Until the media shows itself to be capable of making that distinction, I can't take these articles seriously.