Here’s a rundown of how Facebook’s dealing with the situation:
Facebook Ad Networks Must Delete User IDs
In a blog post, Facebook developer Mike Vernal said the site will not allow ad networks to continue operating on Facebook Platform unless they delete all User IDs, regardless of how they were obtained. The idea, I’m guessing, is that advertising on Facebook is more valuable than having personally-identifiable information on file. Vernal doesn’t explain how Facebook will verify deletion.
User IDs Must Stay in the App
While app developers were previously not allowed to share User IDs with advertisers or data firms, Facebook is changing its policy to say that User IDs may not leave the app at all. Because apps may still want unique identifiers to share with permitted outside parties, such as advertisers or content partners, Facebook is creating a way to share an anonymous alternative to the User ID, to be released next week. It’ll be required for all apps starting January 1, 2011.
RapLeaf is Out
No Private Data Changed Hands
Vernal emphasized that no private Facebook data was accessed as a result of User ID sharing with advertisers. We already knew this — User IDs allow access to the public parts of a profile, including names and any other information shared with “everyone” — but the assurance is somewhat comforting.