Dynamic enforcement of privacy settings by a social networking system on information shared with an external system

Abstract

An external system (such as a website) that interacts with users communicates with a social networking system to access information about the users, who may also be users of the social networking system. If a privacy setting is changed in the social networking system, and the change applies to information that has been shared with an external system, the change is enforced at the external system. For example, the external system may be notified that the information is invalid and must be deleted, or the external system may periodically request the information so that changes to the privacy settings are eventually experienced at the external systems. When an external system again needs the information, whether expired naturally or actively invalidated by the social network, the external system sends a new request for the information, which is subject to the (possibly revised) privacy settings.

What is claimed is: 
     
         1 . A computer implemented method comprising:
 interacting, by an external system, with a subject user of a social networking system, wherein the social networking system maintains for each of a plurality of users, a user account, social connections of the user, and information describing actions performed by the user;   sending a request by the external system to the social networking system for social network information associated with the subject user, the social network information comprising information associated with the user stored in the social networking system, the external system configured to provide an online service to the subject user;   establishing, by the external system with the social networking system, a predetermined time period during which the external system is allowed to use the social network information associated with the subject user of the social networking system and shared by the social networking system with the external system;   receiving, by the external system, a response from the social networking system, the response comprising information responsive to the request for information and one or more privacy settings governing the use of the information, the one or more privacy settings selected by the subject user and specifying rules for access to social network information associated with the subject user, each rule determining whether one or more items of the social network information associated with the subject user are available to one or more other users of the plurality of users;   using, by the external system, the information from the received response in accordance with the one or more privacy settings; and   responsive to receiving the social network information associated with the subject user, deleting, by the external system, after the predetermined time period, at least a portion of the information associated with the subject user received from the social networking system.