The connect requests are validated when the HealthVault user correctly supplies the identity code and is able to successfully answer the challenge question (via Validated connect requests will be delivered once the corresponding external application calls GetAuthorizedConnectRequests. Validated connect requests are removed by HealthVault after 90 days. It is advised that applications call GetAuthorizedConnectRequests daily or weekly to ensure that all validated connect requests are retrieved.