> users who authorized their app to do so. Users did not authorize the app to do any of this. You are incorrect in that assumption. This was a data breach. F

> users who authorized their app to do so. Users did not authorize the app to do any of this. You are incorrect in that assumption. This was a data breach. Facebook also knew about it and did not care. It is a data breach made worse by likely criminal negligence. Edit: I have been (temporarily?) banned from replying or writing comments on HN. Maybe it is because of all the downvotes. Here is my response to the comment reply below (and with this, goodbye, I'm no longer allowed to post on HN I guess). > In what sense did they 'not authorize' this? Users did not authorize the data that was collected by these apps to be retained for more than a day or two, as described by Facebook's terms of service for CA using the data.