Yep. Me, too. I use the e-mail address [email protected], so it would never be accepted by any of my actual contacts. They all use my real e-mail address.
But somehow Facebook says that e-mail address was uploaded by Maserati of Scottsdale (never been to that part of Arizona, and can't afford that kind of car), Mini of Freeport (I've never heard of Freeport), Sunrise Ford NoHo (I have no idea where this is. North Hollywood, maybe? If it is, I don't even live in that state), Crain Kia of Bentonville (Arkansas, maybe? Never been to Arkansas), Bernard's Chrysler Dodge Jeep Ram (No idea where that is), Drive Toyota (Is that Toyota corporate? I've never owned a Japanese car), Land Rover of San Antonio (I've been to San Antonio once, and that was before Facebook even existed).
So I second the OP's suspicion that Facebook is giving out my e-mail address to advertisers/spammers/partners.
I sure hope they didn't pay a premium for Facebook's "targeting," because it is evidently atrocious.
This seems like a really good starting point for an investigation against Facebook!
Anyone else wants to steelman Facebook before I and other become too excited? Because right now I don't see any other options.
Hopefully a federal privacy law will clarify if this is legal at all.
Well, in this case probably not. Though I wrote "[email protected]" above, it's really more like "[email protected]." So the chances of it being guessed are infinitely small.
It's possible that Facebook has been hacked or the above posters used Facebook connect to login to a third-party service that leaked the email addresses.
> So I second the OP's suspicion that Facebook is giving out my e-mail address to advertisers/spammers/partners.
It's much more likely that Facebook has a shadow profile for your actual email address and has connected with yours due to your friends/connections syncing their contacts.
E.g., they know you'd like them to assume that [email protected] is your email address (and they do you the favor in all publicly visible parts of your profile), but they also see that most of the people in your friends list haven an entry for "[email protected]" in their address book, filed under your name. So they'll simply add both addresses as keys to your account.
You're probably also giving that out to businesses you have a relationship with. And most people don't have a second fake phone number to give out to avoid matching.
It's a bit like grocery store loyalty cards: you can give the grocery store bogus contact info when you sign up for one, but the first time you swipe a credit card to pay for your groceries, the store gets your name and a unique ID linked to you (the card #) that can be used to match your profile in (say) an Acxiom database.
I'm curious why Facebook would link a shadow profile about you to your real profile though, even if it knew with relative certainty you were one in the same. I can see no benefit other than advertising (which doesn't really necessitate them telling you in this way) but it seems that it could pretty easily lead to the misunderstanding above where folks impugn nefarious motives to Facebook that aren't accurate.
I find it interesting given what you likely know about the surveillance economy that you're incredulous to the concept that you know and have covered every possible vector.
A single person is no match for the surveillance economy.
I can assure you, the advertising industry knows vastly more about US persons than any state-level surveillance does.
The reality is very simple, these companies dominate the advertising industry (which is huge) so they make a lot of money. That's all it comes down to.
Now it happens that there's some guy on the other side of the world who has a name similar to mine who keeps erroneously putting down _my alias email_ address as his email for a lot of services (maybe he just sometimes uses the wrong major email provider after the @).
I know A LOT about that guys life based on the countless emails I get instead of him. (loan offers, negotiations for used car sales, church group meeting protocols, what politicians he donates to...)
Turns out, the advertiser info FB has on "me" is actually on him (or >95% at least.)
Which means they are also using other types of information to identify you, and since your email and phone number can't be used, it must be those other information types. I'd love to know what they are.
My count is 11,885 advertisers, for what it's worth. It looks like car dealerships are the majority of them... I've never bought a car from a dealership. Very odd.
I wonder if the linking is even necessary, if FBs dark pattern made your friends upload their contact list, they could just infer that since Alice and Bob are your FB friends and they both have your name and number on their uploaded contacts, they can probably associate that number with your FB profile with x% certainty (a higher percentage if your FB friends Cedric, Dave, Emily and Fritz also have the same name and number...).
Fun stuff huh? /s Someone should associate that Patrick Stewart "Extras" line "But it's too late, I've seen everything." with Mr. Zuckhole.
> I wonder if the linking is even necessary, if FBs dark pattern made your friends upload their contact list, they could just infer that since Alice and Bob are your FB friends and they both have your name and number on their uploaded contacts, they can probably associate that number with your FB profile with x% certainty (a higher percentage if your FB friends Cedric, Dave, Emily and Fritz also have the same name and number...).
Yeah, my bet's on this. Once, long ago, when I was more trusting, I installed the Facebook app on my phone (back when Android permissions were all or nothing). Facebook slurped up my address book, and I don't even think they ever explicitly asked for permission to do that.
About six months to a year ago I noticed these contacts in my FB data dump...and they were connected to all kinds email addresses and phone numbers I never had in my address book.
My guess is that if you want to keep Facebook from linking to your personal info from other sources, you need to have zero data overlap (different email, phone, name) and never install any of their apps on any device you own and never share a browser session between Facebook and any other browsing.
One auto dealer worker responded to my question, "how did my name get on a list that your page uploaded?" by saying "I don't know, I just post ads."
The ad settings page suggests that usually the uploaded identifying information is a phone number or email address, but the wording is vague enough that it could probably be just about anything. So if you've ever shared your phone number with Facebook (even once, I suspect, even if you've since deleted it) I wouldn't be surprised if they use that to identify you. Similarly, a postal address or even a city might enough to identify you for these purposes.
Edit: A quick Google shows a number of groups similar to [1] that sell lists of auto owners. I would be surprised if there were not similar groups for other industries, particularly real estate.
[1] https://hedgescompany.com/consumer-automotive-mailing-lists/
(NB: There are very valid reasons WHY this information is in the public record...mostly to make it harder to fence stolen vehicles.)
I've never been to the US!
This is the same email that I use everywhere, so its easy for them to get and stuff into Facebook, but surely they are then paying to advertise to someone who isn't able to buy from them. Or maybe this is then further filtered based upon geo location.
Maybe, as soon as I land in San Antonio I'd start receiving Land Rover adverts because they've provided my email address. Incredible how many of them are US car dealerships.
Well, how to explain that under the list of "Advertisers who use a contact list added to Facebook" the only company there is the National Bank of Canada, with which I had a bank account from 2007 to 2008? I didn't have a Facebook account until almost 10 years later, didn't have the same phone number or address (that was in Canada and I had been back in France for a long time when I signed up to Facebook) and didn't even own the domain of my Facebook email address then.
Also, for some reason they are listed twice, once as Banque Nationale du Canada, and once as National Bank of Canada.
I don't think they had anything else to link to my account than just my real name.
So, let's say you have a Facebook account and go to "Mom & POP Shop, Inc. dot com". If "Mom & POP Shop, Inc. dot com" implements Facebook Pixel (or has a way to consume it) and you buy something from them, giving your phone number, address, etc., then your other information is automatically correlatable just by those two points of data.
The fact that 1,147 other companies have your information tells me that there was probably an intermediary advertising company between "Mom & POP Shop, Inc. dot com" and Facebook, so that intermediary could sell your information to anyone and everyone and, once it's on the "advertising market", it's ripe for correlation from other companies - Amazon, Google, Microsoft, etc.
All that's need is at least one, consistent, correlatable point of data - say your mac address or your browser's established fingerprint and you're "fair game" for targeting on the "advertising market". (Insert Bill Hicks' reference to Marketing and Advertising[1] here.)
You don’t need to click an ad to leave a footprint. You just need to go online.
Facebook claims they don't disclose it. Companies upload lists of email address they already have for Facebook to find similar audiences.
If he only used this email for Facebook, then only Facebook should have it.
https://www.facebook.com/business/help/606443329504150?helpr...
https://www.facebook.com/business/help/606443329504150?helpr...
So tell me, how did 1,147 other businesses and groups get
their hands on my info if I've never given it out?
Why does that get a fail mark? In my opinion such promises are worth absolutely nothing. Does that compromise my anonymity somehow by disabling them?
"Setting your browser to unblock ads from websites that commit to respecting Do Not Track rewards companies that are respecting user privacy, incentivizing more companies to respect Do Not Track in order to have their ads shown at all. By preserving privacy-friendly ads, sites that rely on advertising funding can continue to thrive without adjusting their core business model, even as they respect users’ privacy choices."
https://panopticlick.eff.org/about#do-not-track
Claiming you're not protected because you've decided to block all does seem deceptive, though.
In my case it shows... 2x more than I expected, but looking at the names, most of those were most likely pictures of t-shirts, or funny videos, that I just clicked to check out.
This isn't a superhuman feat. Just install an ad blocker and don't click on the obvious sidebar ads. Done.
My ad preference record demonstrably shows I've not done so, with only 10 advertisers on the list and no ads clicked for the last 90 days at least.
I guess it helps to not have Facebook on your phone too.
How do we settle this?
to be clear OP, i'm not trying to be mean or anything. i don't remember what i had for lunch yesterday. it seems that unless you took technical means to validate that everything you said is true, it's quite likely there was an errant click, an errant sharing of the email to a friend, etc, etc.
It's almost impossible to hide from Facebook.
So you might hide your email address but how do you know others did?
Edit: They didn't have the phone number, according to the data exporter. Pretty plausible explanation here: https://news.ycombinator.com/item?id=19103490
Every week I do this.
FB lets me disallow OTHER types of advertising. But not this type.
"Products that are provided by the Facebook Companies, including WhatsApp and Oculus, as well as Facebook Products like Facebook, Instagram and Messenger."
That has nothing to do with non-Facebook companies. It's something else entirely.
This offline interaction data is different from contact data. The latter doesn't involve any "partnership." It's a completely different part of Facebook ads.
I play my own part in this massive economy that exists of selling data to be used in Facebook ads (Google and other big tech companies do it, too). To me, it's the number one most dangerous thing that has happened to the web. It's my belief that you can make a direct tie from this type of advertising to the layoffs of journalists. That's a more complicated argument than I have time and space for here, but that's why it's an important issue to me -- I think it's a problem for democracy.
Edit: I also tell people I do this to spread the word about the practice and FB's failure to provide proper privacy tools -- in person, but also in forums like I did here.
I just opened that website for the first time, expecting to see thousands of advertisers, but I can't find any number. On the other hand, the list there had 68 'advertisers', most of which I recognise, some that I'm glad hiding, but I don't believe there's only 68 after all this time??? Especially since at least 10 of those were duplicates (like different countries for the same brand)
Am I missing something? I'm just looking at "Who use a contact list added to Facebook"
Per the book "Chaos Monkeys", as well as others sources I would presume since, that single signal is not a "unique key". There are plenty of other ways being used to tie you to your devices (plural! as in, you're a known / constant as you move from phone to laptop to tablet, and so on.)
Mind you, neither is new, but Dragnet Nation and Chaos Monkeys are both insightful, and if you take your privacy and liberty serious frightening.
https://www.antoniogarciamartinez.com/chaos-monkeys/
http://juliaangwin.com/dragnet-nation-available-now/
Of the two, CM is the written to be more entertaining.
All you need is for one of those identifiers (email, phone number, facebook ID) to show up on a list somewhere. Since you say your email is unique and only used for Facebook, it's unlikely that was used for targeting. Your phone number could be acquired from somebody else syncing their contact list to some app or service. Your facebook ID could be acquired from you authenticating to an app or service via facebook, or it could be scraped from public group pages.
>This info was collected by the advertiser or their partner.
Why do you think so many apps want to extract your phone contact list if not to sell? Have you ever given that phone number out, even if only to one friend or relative? If your name and phone # are saved in their smartphone contact list, they may have been using a smartphone with an adware OS designed by the largest data monitizer on earth bundled with additional spyware preinstalled from the manufacturer, service provider, plus 10 of the highest bidders. Those advertisers could have bought it from your cc issuer, merchant, loyalty card issuer, car dealership or bank as part of a bundle with your transaction history. It could have come with a location history package from your mobile service provider or it could have come compliments of Equifax.
Sure, it could have been collected way back in 2017 or whenever while FB was still giving the data out for free. There are plenty of totally innocent explainations...
If it turns out next month that those 1,147 advertisers are all just Alphabet companies and the contact list was uploaded by their partner, Facebook, you'll sure feel stupid for jumping to conclusions. /s
B) People searched your name on Facebook
C) Facebook creates ghost profiles with all these details until it has enough confidence to sync it with an new/existing Facebook profile
Once an EU citizen contacts them and requests the dump, they get redirected to the same tool. You have to explicitly bug them and quote the article 15 (of the GDPR) a few times to receive a different dump.
Disclosure: I haven't done this personally, but I have talked to people who did and read their interactions with Facebook. I can't guarantee that this info is still up-to-date, since that happened months after GDPR went into effect.
That data is in blackbox ML system which is exclusively for ad targeting, and it can't be described :) that's the Facebook's defense.
GDPR doesn't cover the intermediate info AI/ML generates on you.
I wonder why the massive difference
Excellent question. I am also very intrigued. I'm gonna ask them all. https://cohan.io/activate-the-gdpr-robots/
Not directly, perhaps.
>The inbox for that account only contains emails from Facebook. I have never given Facebook my phone number.
Your phone number can easily be scraped or harvested from other users who give Facebook your information.
>I have never clicked on an ad in Facebook.
VERY unlikely.
>I have never connected an app with my Facebook account.
Possible.
>_Facebook_ itself is the only entity which has ever had my contact info associated with my account.
Very unlikely.
>So tell me, how did 1,147 other businesses and groups get their hands on my info if I've never given it out?
User error.
The point is that "I would never do that!" is not a valid defense. Humans make errors, you are not an exception to this rule and leaking data is made very, very easy.