Facebook suspends another data analytics firm
cnbc.com
cnbc.com
What does that mean? That’s utter nonsense. I work in an industry where data is just as, if not more, sensitive (health and finance data) and they somehow manage to do this correctly (well, at least not have an embarrassing mistake that makes the Zuck look like the irresponsible unmatured kid he still is). But what they don’t do is willy nilly let people, without human oversight, access data. Who is that dumb? This is criminal negligence in not even guarding against the possibility of misuse.
But, unless there are any security bugs in Facebook's code being exploited, each and every API call is legitimate, prima facie.
The issue with Cambridge Analytica, for example, was with unauthorised retention and sharing of data, as well as its use for purposes not covered by the API access agreement. These circumstances cannot be detected from the logged data alone.
If you want another take on the “why,” consider the incentives of the two parties. One organization gains face by finding more breaches, one loses it.