The distinction people have been using in this thread is "buying eyeballs" vs. "buying user data." And it's a meaningful distinction; I might trust FB to show me an ad microtargeted at employees of my company, but I don't trust every advertiser to know what company I work for.