Facebook
Social Media · 17 contradictions
Fail
critical
Facebook makes $135 billion a year letting advertisers target you based on 52,000 things they know about you. They say they don't 'sell' your data — technically, they sell access to you. Under California law, that IS selling. When someone pays to show you an ad because you're a depressed 19-year-old interested in weight loss, your data was the product whether or not a CSV file changed hands.
critical
If you've never signed up for Facebook, they still have a file on you. Your friends uploaded their contacts — Facebook has your phone number and email. You visited a website with a Facebook tracking pixel (30% of all major websites have one) — Facebook knows. You used an app with Facebook's code inside it (a third of top Android apps) — Facebook knows. A Belgian court ordered them to stop. They told the US Senate they don't do this. Both things can't be true.
critical
You turned off location tracking. Facebook tracked you anyway. They use your Wi-Fi connections, Bluetooth signals, IP address, and browsing patterns to figure out where you are. A university researcher proved it — she turned everything off and still got location-targeted ads. When a Senator called this misleading, Facebook said tracking your location is 'required' for their advertising business. The off switch is decoration.
WhatsApp
Messaging Apps · 15 contradictions
Fail
critical
WhatsApp says no one can see your messages, but the FBI gets a list of everyone you talk to every 15 minutes. If you have iCloud backup on (most people do), they get the actual messages too.
critical
WhatsApp encrypted your messages in transit but stored them unencrypted in the cloud for five years. They fixed it, but hid the switch so deep in settings that 9 out of 10 people still have unprotected backups.
critical
Facebook bought WhatsApp for $19 billion and promised regulators they'd never link the data. Two years later they started linking it. They were fined and kept doing it anyway, then made it mandatory.
critical
Meta's own scientists proved Instagram makes teen girls want to hurt themselves. One in three felt worse about their bodies. Meta buried the research and started building Instagram for kids. Families of dead children are suing. 1,867 lawsuits and counting.
critical
Instagram was redesigned to prioritise content that makes you angry because anger keeps you scrolling. Their engineers proved turning this off reduced harm. They kept it on. For teens, the algorithm leads from fitness photos to eating disorders to self-harm. That path was engineered.
critical
Meta's defence is that kids shouldn't be on Instagram. Their age check is a birth date field where a 12-year-old types '2005.' A judge said design problems aren't protected by Section 230. Schools in 19 states are suing because Instagram affects children's ability to learn.
critical
Meta says eye tracking just makes VR work better, but their own executive admitted it could measure whether you look at ads. The companion app includes Meta's advertising toolkit. Your eye movements — what catches your attention, how long you look at things — could feed the same ad-targeting system as Facebook and Instagram.
critical
Meta markets the Quest 3 as privacy-focused, but they're currently under a $5 billion government penalty for lying about privacy — and got caught violating that agreement. When a company fined billions for privacy violations says their new product with cameras, microphones, and eye trackers is "built with privacy in mind," their history suggests otherwise.
critical
Meta says children can't use eye tracking, but researchers found kids under 13 using the headset in almost every VR game they checked — without proper child accounts. These kids are being recorded by cameras, microphones, and room-mapping sensors without their parents' knowledge or consent. Meta's child safety controls only work if children actually use child accounts, which they clearly don't.
critical
Meta kept your Messenger conversations readable for over a decade while their other app (WhatsApp) had encryption since 2016. They chose ad revenue over your privacy for seven extra years.
critical
Meta told Congress that Messenger messages are private. In 2022, a Nebraska mother and her 17-year-old daughter were charged with illegal abortion — and the key evidence was their Facebook Messenger conversations, which Meta handed to police with a search warrant. The daughter was sentenced to 90 days in jail and two years probation. Meta complied with 76% of all government data requests in 2023. "Private" means "private until a detective asks."
critical
Meta said it doesn't read your messages for ads, but admitted scanning them, got caught using URL data for advertising, and still fetches every link you share — except in Europe where the law says they can't.
Threads
Social Media · 6 contradictions
Fail
critical
Threads' own App Store privacy label — which Meta itself filled out — discloses collection of health data, financial information, precise location, contacts, browsing and search history, purchases, and "sensitive info." Top10VPN found Threads collects 45% more data points than X. When asked, Meta's deputy privacy officer said the label "isn't fully representative." They're right — it's worse than it looks. You signed up to post short text updates. Threads wants your health records, bank activity, and precise GPS coordinates.
critical
Meta launched Threads in 100+ countries in July 2023 — except the entire European Union. The reason: GDPR. Threads collects "sensitive information" under special EU protection, and European courts had already struck down Meta's "legitimate interest" excuse. The app was so invasive that Meta's own lawyers said "not in Europe." They launched there five months later with modifications. If a product is too invasive for the company's own legal team to defend in court, what does that tell you about using it everywhere else?
high
Want to delete Threads? You have to delete your Instagram too — every photo, every follower, years of content, gone. 275 million people signed up during the hype without reading the fine print. Instagram head Adam Mosseri admitted on Threads itself they were "looking into" separate deletion. That was July 2023. As of 2026, accounts are still chained together. Meta built a roach motel: easy to check in, impossible to leave without torching everything you built on Instagram.
critical
Hospitals installed Facebook's tracking pixel on their websites. It sent your medical appointment bookings, the conditions you searched for, and your doctor's name directly to Facebook. Crisis hotlines sent call logs. Tax sites sent income data. The website operators had no idea. Facebook's code collected everything the page contained. Your cancer diagnosis, sent to an advertising company via a tracking pixel.
critical
A priest was tracked to gay bars using mobile data from the ad-tech ecosystem. The data came from app SDKs — the same infrastructure Facebook SDK, Google Analytics, and ad networks feed. His Grindr usage was cross-referenced with his phone's location. He was outed. He resigned. The data that destroyed his career started as "anonymous app analytics."
critical
$5 billion fine. The largest privacy penalty in history. Facebook's SDK in third-party apps continued collecting data even when users had turned sharing off. The privacy settings were a placebo. The SDK ignored them. Five billion dollars says Facebook knew and did it anyway.