Archibong said the second phase of the investigation involves looking into whether there is evidence that the suspended apps or other apps misused data.
"We suspended the mypersonality app nearly a month ago because we believe that it may have violated Facebook's policies", Facebook VP of product partnerships Ime Archibong said in a statement provided to The Register. That developer had taken advantage of earlier Facebook APIs that, when users took part in a quiz or game, granted access not only to the individual user's data but that of their friends on the site, too.
The company is not disclosing the names of the suspended apps until it can complete the review.
"We are investing heavily to make sure this investigation is as thorough and timely as possible", Archibong said.
More explosions in Surabaya after church attacks
Al-Qaeda has carried out the deadliest attacks in Indonesia, killing more than 200 people on the island of Bali in 2002. At Surabaya Centre Pentecostal Church, Futrianto then drove his auto onto the church grounds and detonated explosives.
But that app was clearly not alone in accessing users' private information, as Facebook product partnerships vice-president Ime Archibong said the company had already identified more suspect creations using its platform.
In 2016, Facebook believed CA when it said that it had deleted the data it had stored, only to find out the truth in 2018 after a whistleblower came forward. Facebook also will ban apps if their developers refuse to participate in an audit.
'We will keep you updated on our progress'. The data collected via the app was accessed by 280 people from 150 organizations, including universities and staff from Facebook, Google, Microsoft and Yahoo.
Facebook is seemingly being transparent about how many apps are under investigation for possible data misuse, but users still have no idea which apps are being examined further, or which apps even had access to that much data in the first place. On top of that, it's not year clear the full extent of data misuse by the suspended apps.
The company has also built a website that notifies users if their data has been misused.