How every Facebook app in 2010 collected users' personal data, what devs could do with it, and why Facebook can't close the Pandora's box it opened a decade ago
For a spell during 2010 and 2011, I was a virtual rancher of clickable cattle on Facebook. — It feels like a long time ago.
Context & Ripple Effects
This piece lands mid-scandal: weeks after Facebook disclosed that Cambridge Analytica may have collected data on as many as 87M people, The Atlantic widens the lens from one bad actor to the entire 2010-2011 app ecosystem, where every third-party developer could harvest users' personal data as a condition of building on the platform.
The argument matters because Facebook has since conceded the problem wasn't isolated — its own newsroom later admitted [[a:930210|device-integrated APIs let vendors recreate Facebook-like experiences under contracts now being faded out]]. By the end of 2019, retrospectives on the company's growth to 2.45B users and its arrival in regulatory crosshairs treated this era of loose data access as a defining cost of the decade.
First-order effects
- Users who granted permissions to any 2010-era Facebook app had their personal data copied to thousands of unaccountable developers, with no mechanism to recall it once the apps went dormant.
- Facebook faces immediate pressure to explain why 'delete' is impossible at platform scale, compounding the reputational damage already underway from the Cambridge Analytica disclosure.
Second-order effects
- Regulators and journalists shift their framing from a single rogue researcher to systemic platform design, forcing Facebook to retire broad API access programs like the device-integrated integrations it says are being phased out.
- Every publisher and partner weighing Facebook distribution — including outlets considering the dedicated news tab offered a year later — must price in the track record documented here rather than the current terms alone.
Third-order effects
- If the pattern holds, social platforms move structurally from open developer ecosystems toward tightly contracted, revocable data access — trading the growth engine of 2010 for governance overhead, a shift the decade-end retrospectives identify as central to Facebook's regulatory reckoning.
- The episode establishes a template other platforms inherit: data shared by default becomes a liability that outlives the products built on it, making retroactive containment a design constraint rather than an afterthought.
The trend: Platform openness built on default data sharing is being dismantled into contracted, auditable access, with Facebook's 2010 app ecosystem as the cautionary case driving the reversal.