Facebook tracks both users and non-users extensively. Integration with Facebook has become essential for the many new Web or mobile apps coming to market daily. A large percentage of these apps are now completely connected to Facebook, while others rely on Facebook as a utility, even using it to authenticate users on behalf of applications that have no social purpose.
To say that Facebook is intertwined with thousands of applications that range from social to business is an understatement. Of the 2,556 apps in the Google app store, more than 40% are integrated into Facebook’s Audience Network to maximize clicks and boost audience engagement. Their data become Facebook’s data. Your behavior on these integrated apps – Facebook tracks.
So what information does Facebook collect through its apps, plugins, and pixels using its Audience Network for the company’s massive advertising platform? Facebook tracks your:
- real-time location
- device information
- device or computer type and model
- operating system, including its version and patch levels
- applications and their versions
- screen resolution
- mouse movements, mouse clicks, and touchpoints on the screen
- time zone and language code
- name of your mobile carrier
- information on an app, including the name and description of your current activity (e.g., WatchingNewsVideo)
- all current active and previous IP addresses
- body movements
- devices in your vicinity
- users in your vicinity (e.g., registered Facebook accounts)
- people in your vicinity (e.g., non-Facebook registered persons)
- current activity
- current speed
- local accounts, including registered sites
In crafting the same experience across every Facebook-enabled device, Facebook tracks many device attributes. Your battery levels and your storage space are just two of them. But the company can also paint an extensive picture of your IoT environment at will using IDs and mapping other devices that have no connection to Facebook.
In its own words, Facebook tracks and uses your device to scan the local network and identify other devices and their associated users. According to their website, Facebook tracks the following:
Network and connections: information such as wifi connection, the name of a user’s mobile operator or ISP, language, time zone, mobile phone number, IP address, connection speed and, in some cases, information about other devices that are nearby or on their network, so we can do things like help them stream a video from their phone to their TV.
So not only does Facebook know where you are, but it also knows what and who is around you. A 2014 patent filed by Facebook shows that it can now determine if two users are local and even which way each user is facing in order to calculate the probability that they know each other and present them with appropriate “options” accordingly. How? By determining local wireless connections such as Bluetooth and NFC along with GPS, gyroscope, and even a user’s camera. The metadata and name of every Wi-Fi hotspot and Bluetooth device a user has connected to is also included, even if it’s a device they haven’t used in months. This metadata is collected, tracked, and stored by Facebook.
Although the IoT is Facebook’s future, its current most active data collection tools of the trade are (1) the cookie and (2) the tracking pixel, both of which are unique identifier codes assigned to mark a system or a user. These silently sit in the background, observing and measuring user activity and behavior. All this information is sent to the Facebook mothership where it is processed into insight and used for revenue generation. Here is a more detailed breakdown about how Facebook tracks users and non-users:
About Acreto IoT Security
Acreto IoT Security delivers advanced security for IoT Ecosystems, from the cloud. IoTs are slated to grow to 50 Billion by 2021. Acreto’s Ecosystem security protects all Clouds, users, applications, and purpose-built IoTs that are unable to defend themselves in-the-wild. The Acreto platform offers simplicity and agility, and is guaranteed to protect IoTs for their entire 8-20 year lifespan. The company is founded and led by an experienced management team, with multiple successful cloud security innovations. Learn more by visiting Acreto IoT Security on the web at acreto.io or on Twitter @acretoio.