They can just use information that their users choose to share voluntary with them, such as language, location history from posts, interests, group membership, places where they checked in.

There's no need to spy on users outside Facebook's app to get relevant data.