Facebook's problems just keep accumulating, drip by drip—or more like splash by splash. It’s now been discovered that Facebook not only collects and uses the personal data of its members but also collects the data of those who never signed up for Facebook.
So if you're one of those who blames Facebook users for allowing their personal data to be compromised, don't be so smug. Facebook may be sharing yourpersonal data as well.
Daniel Kahn Gillmor, senior staff technologist at the ACLU, discovered that, although he never joined Facebook or any other social network, Facebook has a detailed profile on him.
Facebook obtains information from those not on Facebook in two different ways: from other Facebook users and by tracking people who visit other other sites on the web.
When people sign up for Facebook, they’re encouraged to upload their contacts to make it easier for Facebook to connect them with their friends. That allows Facebook to access personal contact information for people who never signed up for the platform or gave their permission to share their information. Facebook knows that these contacts are friends of the new Facebook user, and can start compiling additional details on these non-members.
Gillmor explained, “I received an email from Facebook that lists the people who have all invited me to join Facebook: my aunt, an old co-worker, a friend from elementary school, etc. This email includes names and email addresses — including my own name — and at least one web bug designed to identify me to Facebook’s web servers when I open the email." He added, "Facebook records this group of people as my contacts, even though I've never agreed to this kind of data collection.”
“Similarly, I'm sure that I'm in some photographs that someone has uploaded to Facebook — and I'm probably tagged in some of them. I've never agreed to this, but Facebook could still be keeping track.”
Facebook also tracks individuals when they visit other websites. Whenever they click a "like" button on the website, that information often gets fed back to Facebook, along with a list of the websites visited and any Facebook-specific cookies the browser might have collected. Facebook calls this a "third-party request." As individuals do this over time, Facebook is able to accumulate a detailed profile, again, even though they never signed up for a Facebook account.