It measures the time a request to Facebook requires (which is exposed by the API, even if content, content size, ... are not). Facebook requests that a user is not allowed to see return quicker, so you can test if a particular post is visible or not to the visitor. combined with the ability to create targeted Facebook posts, that are limited by Gender, age and/or geographic location, you can find out details about the user you shouldn't be able to know.