Logging users out after 24 hours

I'm wondering if there's a specific 'standard' time for logging users out of a website that contains sensitive information and data. I am thinking that kicking them off the website in 24 hours could be a little inconvenient and frustrating, so extending the session time beyond 24 hours might be an option. Does anyone know any other options/solutions for this matter?