Meta quietly rolled out an update to its business usage rules late last week, which will reduce the checks it has in place for businesses that want to use its user data.
As detailed in the Meta Developer Blog, Meta removed its access verification requirement for developers looking to tap into its data flows.
As explained by Meta: “If you build apps that access Meta business data owned by your clients, you no longer submit business details for a separate access review, and you no longer wait on its outcome before going live.”
In 2022, Meta launched data access verification requirements, which added another measure to check whether a business that wanted to use Meta data had a legitimate and allowable use within Meta’s rules.
As outlined in the access verification overview: “To ensure that only businesses with a legitimate use case can access another business’s business data, some API endpoints perform a verification check when called by an app that has been created or claimed by a business, or by a business app that has yet to be connected to a business. If the business that created, claimed, or is connected to the app has been verified as a Tech Provider, the endpoints will process the request normally. If the business has not been verified as a Tech Provider, however, the endpoints will reject the call and return an error.”
The process essentially puts another barrier in place to ensure that third-party developers are not accessing Meta’s data incorrectly. In the past, incorrect access has caused the platform various issues.
The most high-profile instance of this was the 2018 Cambridge Analytica scandal, in which a political influence operation claimed to have gained access to Meta user data by backdooring access that had been granted to academics.
But other developers have also reported gaining access to reams of Meta user data. In 2020, the BBC reported that Meta mistakenly allowed 5,000 developers to access information from Facebook user profiles.
In the wake of these revelations, Meta spent years closing access loopholes to meet regulatory requirements and ensure that people’s personal data was not being used for unapproved purposes.
Access verification was one of these measures. It’s interesting that Meta is now removing this element as the company looks to expand business adoption of its artificial intelligence tools.
Meta said it’s able to remove access verification because its Business Verification and App Review processes have both matured, and now use more sophisticated signals.
But it’s a small, interesting point of note within Meta’s updated process, which could see the platform reducing its data access parameters.
