If Meta ends your access to its platform — for any reason — you must delete all user data you collected through Meta's APIs, unless Meta specifically tells you in writing that you can keep it.
Requirement narrowed from user-initiated deletion requests (with 90-day timeline) to only termination scenarios, and changed from 'tell you otherwise' to requiring 'written permission' for retention.
View full change record →User data held by third-party apps built on Meta's platform could be forcibly deleted if Meta terminates that developer's access, potentially causing loss of user-generated content or account history stored within those apps.
Cross-platform context
See how other platforms handle Mandatory Data Deletion Upon Termination and similar clauses.
Compare across platforms →This clause gives Meta near-total control over the fate of data collected through its platform, and can force developers to delete data that may be central to their product, potentially breaking apps users depend on.
REGULATORY FRAMEWORK: Implicates GDPR Art. 17 (right to erasure) and Art. 28(3)(g) which requires processors to delete or return personal data at the end of service provision — this clause aligns with GDPR processor obligations. CCPA §1798.105 grants California consumers the right to request deletion. Retention exceptions for legal compliance under applicable law are noted but not defined with specificity.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.