https://www.theverge.com/2018/3/21/17148726/facebook-developer-data-crackdown-cambridge-analytica

In the wake of the Cambridge Analytica scandal, Facebook has announced further limits it’ll be placing on apps that gain access to your account. Developers will now receive less information in the first place, they’ll be cut off from access when people stop using their app, and they’ll have to get Facebook’s approval to access more detailed information.

By default, developers using Facebook Login will now receive only a user’s name, profile photo, and email address when someone signs in through Facebook. Further information, such as their Facebook posts, will require the developer to receive permission from Facebook. It’s not clear how robust of a process this will be (they’ll have to “sign a contract”), and it’s not clear if Facebook intends to run audits to ensure compliance with privacy measures — as it failed to in the Cambridge Analytica situation — but it’s a start to preventing user data from being needlessly spread around.