Meta is retiring Access Verification, the separate review that apps had to pass before accessing business data owned by their clients. The change was announced on the Meta for Developers blog on October 9. Business Verification and App Review now carry that role, and the rules on what you can do with the data are unchanged.
What changed
Access Verification was introduced in 2022 to confirm that a Tech Provider app had a legitimate reason to touch another business's data. Meta says it will no longer be required in the Tech Provider onboarding flow. The form, its prerequisites and its status field are being removed from App Dashboard, and endpoints will stop checking for a passing Access Verification status. Meta says it will publish changes as they land and gave no single cut-over date.
App classification also works differently. Adding an app to a business no longer changes its business use on its own. Direct Integrator is now the default, and an app becomes a Tech Provider only by upgrading explicitly or by requesting the advanced permissions that require it.
What still applies
This removes one review step but doesn't loosen the rules. Meta's post lists what stays:
- Business Verification is still required before accessing data owned by other businesses
- App Review is still required for advanced permissions, with unchanged standards
- Platform Terms, Developer Policies and Data Use Checkup still apply
- Data Handling Questionnaire and Data Protection Assessment requirements remain
Who it affects
The change matters most to teams building or buying tools that manage clients' Meta assets: reporting dashboards, creative automation, bulk launchers, CRM and lead-sync integrations, and agency in-house tools connected to client ad accounts. For these teams, one gate between building an integration and going live is gone, so onboarding a new tool should be faster.
Social Media Today pointed out that the change also reduces Meta's data access checks just as it pushes more businesses to plug AI tools into their accounts. That makes your own due diligence on the apps you authorise more important, not less.
What to do
If you build internal tools, check your app's classification in App Dashboard, since it may now default to Direct Integrator. Make sure Business Verification is complete before you request advanced permissions. If you only use third-party tools, review which apps have access to your business portfolio and remove any you no longer use. Each connected app is another path into your ad accounts.
What it means for you
- Access Verification is gone for Tech Provider apps, so there is one less review before going live.
- Business Verification and App Review for advanced permissions are still mandatory.
- Direct Integrator is now the default app classification, so check yours in App Dashboard.
- Audit which apps can access your business portfolio, because fewer platform checks shift more responsibility onto you.
Sources
- Retiring access verification for tech provider apps (Meta for Developers)
- Meta removes access verification for developers (Social Media Today)
