How Facebook Figures Out Everyone You've Ever Met (gizmodo.com)
"I deleted Facebook after it recommended as People You May Know a man who was defense counsel on one of my cases. We had only communicated through my work email, which is not connected to my Facebook, which convinced me Facebook was scanning my work email," an attorney told Gizmodo. Kashmir Hill, a reporter at the news outlet, who recently documented how Facebook figured out a connection between her and a family member she did not know existed, shares several more instances others have reported and explains how Facebook gathers information. She reports: Behind the Facebook profile you've built for yourself is another one, a shadow profile, built from the inboxes and smartphones of other Facebook users. Contact information you've never given the network gets associated with your account, making it easier for Facebook to more completely map your social connections. Because shadow-profile connections happen inside Facebook's algorithmic black box, people can't see how deep the data-mining of their lives truly is, until an uncanny recommendation pops up. Facebook isn't scanning the work email of the attorney above. But it likely has her work email address on file, even if she never gave it to Facebook herself. If anyone who has the lawyer's address in their contacts has chosen to share it with Facebook, the company can link her to anyone else who has it, such as the defense counsel in one of her cases. Facebook will not confirm how it makes specific People You May Know connections, and a Facebook spokesperson suggested that there could be other plausible explanations for most of those examples -- "mutual friendships," or people being "in the same city/network." The spokesperson did say that of the stories on the list, the lawyer was the likeliest case for a shadow-profile connection. Handing over address books is one of the first steps Facebook asks people to take when they initially sign up, so that they can "Find Friends." The problem with all this, Hill writes, is that Facebook doesn't explicitly say the scale at which it would be using the contact information it gleans from a user's address book. Furthermore, most people are not aware that Facebook is using contact information taken from their phones for these purposes.
On the contrary, it is an excellent easy to game advertising platform, for psychopaths... The users are such soft targets. I mean, look what they elected for president! And it was done on a comparatively shoestring budget... It is both hilarious and tragic
I'm expect that using the system tools to block access to the address book is probably sufficient on Android and iOS - so long as it's done before the app is ever launched.
What surprises me more is that people don't consider geolocation. Many many facebook users share their location with Facebook. It's then trivial for facebook to see that you are repeatedly in the same location at the same time as another person.
That lawyer might have met defense counsel at a couple of mediation hearings in a lawyer's office, then they went to the same court house at the same time every day for a week. It's easy to suppose they know each other.
Similarly for the sex worker who meets the same client at a handful of different hotels. Both their phones arrived at the hotel at the same time on the same days. Then they left together. Again, the connection is trivial.
At least with Google, you are paid for this data with better traffic reports and better directions. You can decide if that is worth it or not. With Facebook it seems you get nothing in return while they amass a huge amount of information you thought was private.
Here are some of the cited links:
http://mashable.com/2013/06/26/facebook-shadow-profiles/
http://www.zdnet.com/article/anger-mounts-after-facebooks-shadow-profiles-leak-in-bug/
http://www.zdnet.com/article/firm-facebooks-shadow-profiles-are-frightening-dossiers-on-everyone/
https://splinternews.com/facebook-recommended-that-this-psychiatrists-patients-f-1793861472