Their Like-Buttons that are spread on a lot of the web, allow them to track your IP-address and what webpage you're on (thanks to the HTTP referrer). They also have an analytics library that some webpages use, giving them the same data and more.
And your friends probably have you in their contacts on their phones, which is uploaded to WhatsApp's server (unless none of them uses WhatsApp).
That doesn't mean you should not stop giving them even more information by you directly using their services.
There are various mechanisms to preventing tracking like using an ad blocker to prevent loading tracking elements, preventing 3rd party cookies from being set, using something like noscript to block javascript from facebook/google/etc, and using Tor. Many of these don't take long at all to configure.
You implied that one does not need governmental help to protect against Facebook. That's what I argued against. No matter how informed you are about Facebook's practices and no matter how technologically skilled you are, you cannot be sure that Facebook doesn't have your data.
By that point, they'll he on their last leg, and we'll be worrying about the next social network.
You don't have to. You can start today by not giving facebook any more information (stop using their service). If facebook bleeds enough users, maybe they'll become motivated to change. I seriously doubt, at least in the US, that we'll see any legislation that forces them to change here.