Researchers found two third-party Facebook app developers had been storing user data on a publicly accessible Amazon Web Services server.