Thread: Popular Facebook apps found to be collecting, selling user info

Popular Facebook apps found to be collecting, selling user info
By Jacqui Cheng

If you use Facebook but don't want your personal information leaked all over the Web, you had better make sure you don't use any of Facebook's most popular apps. According to an investigation by the Wall Street Journal, "tens of millions" of apps on Facebook transmit varying amounts of identifying information to their own personal ad servers, even in cases when users' profiles were set to completely private.

On the most benign level, many Facebook apps gather a user's Facebook ID if that user installs the app on his or her profile. The ID itself doesn't necessarily give anyone access to a user's protected profile, though if the person in question has a public profile, then all of that information could be (and undoubtedly is being) scraped.

For other apps, however, the data collection apparently doesn't stop at a user's ID. The WSJ claims that all of the 10 most popular apps collect some form of user data, and three of them—yes, Farmville included—also transmit personal information about a user's friends to outside servers. One company, RapLeaf Inc., was found to be linking Facebook ID information with its own database of users that it cross-checks from other parts of the Internet. The company collects this information through several of its apps, including those made by LOLapps and the Family Tree application, then sells the information to at least 12 other ad firms.

Facebook has already disabled the accounts for some applications and has taken action in the past to limit RapLeaf's data collection. Still, the discovery draws further attention to an ongoing problem for Facebook: user privacy. Even when users try to be fastidious in protecting their data on the social networking site, there always seems to be an opening that lets more information out than users want. Most Facebook apps are written by independent developers or small companies, though, and it's not always clear whether the info being collected is even intentional.

Facebook takes a tough stance against apps that violate its terms, which limit what kind of data developers can collect. "Our technical systems have always been complemented by strong policy enforcement, and we will continue to rely on both to keep people in control of their information," a Facebook spokesperson told the Journal. The company didn't specify which apps it took action against, but did say that it has "taken immediate action to disable all applications that violate our terms."

Doesn't matter what you do on the net, if you shell out personal information, 99.9% of the time someone is making a profit off your statistics. Its just the way advertising works. Even the companies which say they aren't doing it, most do, but have fine print justifying it.