Storing Facebook API data

Question

I\'m building a web application that relies upon the Facebook API. I want to use information retrieved about the users\' friends, in order to display custom messages and update

Answer 1

Not sure when the 24 hour data storage policy was deprecated, but Facebook data can now be stored indefinitely...

How long can I store data?

We have deprecated our 24 hour data storage policy. You may now indefinitely cache data to improve your application's user experience. Please refer to Section II of the Developer Principles and Policies for more details on our data storage policies. You can learn more about real time updates here.

Answer 2

You can cache the data, but you have to keep it updated.

4.If you cache data you receive from us, use it to improve your app’s user experience and keep it up to date.

Source: Developer Policy Protect Data

Answer 3

You can definitely store such data in your database. As stated in your second quote "you have no rights to this data", so you cannot sell or redistribute that data. You can however remix this data to improve "your application's user experience".

When the user authorises your app (i.e. connects with your app via Facebook) he allows your app to access his account. The most basic access provides you (the developer) with the user's list of friends as specified in Permissions. So essentially the user grants you permission to use that data. Additionally if you request some other friends-based permissions (e.g. friends_activities, friends_checkins explained in the same document) the user explicitly grants you permission to use that data. But obviously you can't share that information with 3rd parties.

I've been involved in many projects where we had to store information regarding a user's friends and it was always legally sound.

Also, there is no time limit on such storage.