Data Portability

Overview

This section describes the process you will use to onboard as a destination across Export Your Information (EYI) by creating a Data Transfer app.

Summary of process

Step 0 - Verify if Data Portability is the right use case for you

Before proceeding, please review the DTP Data Types section to familiarize yourself with the data types we currently offer. We recommend confirming that EYI is the appropriate use case for you. This will help ensure a smooth onboarding process and prevent unnecessary effort for both you and our team.

Step 1 - Register your app with the Data Trust Registry

Before starting the Meta onboarding process, you must register your app at DTI Trust Registry. Meta has partnered with the DTI Trust Registry to manage the vetting process for data transfer destinations. Make sure your app is registered and vetted here before proceeding to the next steps.

Note: Meta reserves the right to conduct further review before rendering a decision (see Step 3).

Step 2 - Prepare to create a Data Transfer app

  1. Create a Facebook Business Manager Account. You must create a Facebook Business Manager account and verify your business in Business Manager. When your account is set up and you have started your account verification, you can add people to your Business Manager
  2. Confirm OAuth Support. Your service must support user authentication using OAuth 2.0 to facilitate secure data transfer from Meta. Learn more about OAuth 2.0 and OAuth Scopes.
  3. Confirm API Support. You must have APIs which can be used to create and update entities supported on your platform. These APIs will be called from the data adapters you build to facilitate the transfer of data from Meta to your platform. e.g.: POST /V1/photo - This API should allow creating/updating a photo entity. It will be called from within the PhotoImport adapter you would be setting up on the open source project.
  4. Confirm your Policy Terms and Conditions. You need a publicly-available URL that hosts your business data policies and terms.

Step 3 - Create a Data Transfer app

You'll need an account and an app registered on developers.facebook.com to configure the integration between our platforms and yours. As part of creating the app, you'll need to enter the Developer Portal and complete:

  • An onboarding application form - to request approval from Meta to be listed as a destination for data transfer.

We will review your onboarding form alongside the OAuth and security compliance information, checking that your submission meets the following key criteria:

  • You have a valid Level 1 or Level 2 entry (dependent on data requested) within the DTI Trust Registry.
  • You have a verified Meta Business Manager Account.
  • You have a publicly available privacy policy, including how users can exercise their data subject rights.
  • You support OAuth 2.0.
  • You meet the security standards.

After review of your application, a representative from Meta's data portability engineering team will inform you of the outcome so you can proceed to the next steps.

Step 4 - Development and Integration

In order to transfer data to your platform, Meta's portability infrastructure needs to call your APIs. Meta transfers data using the Data Transfer Project (DTP) transfer worker, so you'll need to integrate your platform with DTP.

As Meta's data portability infrastructure needs to call your APIs on behalf of the user requesting the transfer, Meta authenticates with your API using the OAuth 2.0 Authorization Code flow. To support this, you must complete an OAuth Configuration form on developers.facebook.com.

Step 5 - Testing and Review

Once your app on developers.facebook.com is approved and you've begun integration of your platform with DTP, we'll need to test data transfers to your platform end-to-end. This may require testing multiple revisions of your DTP Adapters, OAuth configuration, or API. Your Meta engineering partner will help you with this process.

Step 6 - Release and Maintenance

When testing is complete, and both parties are satisfied with the stability of the integration, Meta can activate your platform as a public-facing destination for data transfer. Your platform will appear in Meta's Export Your Information (EYI) tool.