ProPublica

Journalism in the Public Interest

Cancel

Yes, Companies Are Harvesting – and Selling – Your Facebook Profile

Personal details from your Internet profile—from your professional history to how many friends you have—are being collected, analyzed, and sold.

(Image: Flickr)

Yesterday, we got a rare look at how information on your public social media profiles—including Twitter, Facebook and LinkedIn—is being harvested and resold by large consumer data companies.

Responding to a congressional query, nine data companies provided answers to a detailed set of questions about what kinds of information they collect about individual Americans, and where they get that data. 

Their responses, released Thursday, show that some companies record — and then resell — your screen names, web site addresses, interests, hometown and professional history, and how many friends or followers you have.

Some companies also collect and analyze information about users’ “tweets, posts, comments, likes, shares, and recommendations,” according to Epsilon, a consumer data company.  

While many of these details were already available on the data companies’ websites, the lawmakers used the letters as a chance to raise awareness about an industry that they said has largely “operated in the shadows.”

“Posting to Facebook should not also mean putting personal information into the hands of data reapers seeking to profit from details of consumers’ personal lives,” Massachusetts Rep. Edward J. Markey told ProPublica in an e-mailed statement.

“Users of social media want to share with friends, not enable the sale of their personal information to data miners.”

Companies that collect social network information said they only take what is publicly available, and that they follow the rules laid down by each social networking site.

Acxiom, one of the nation’s largest consumer data companies, said in its letter to lawmakers that it collects information about which social media sites individual people use, and “whether they are a heavy or a light user.”

The letter also says Acxiom tracks whether individuals “engage in social media activities such as signing onto fan pages or posting or viewing YouTube videos.”

The company said that it does not collect information about individual postings or lists of friends.

Data companies of course, do not stop with the information on Twitter, Facebook, and LinkedIn. Intelius, which offers everything from a reverse phone number look up to an employee screening service, said it also collects information from Blogspot, Wordpress, MySpace, and YouTube.

This information includes individual email addresses and screen names, web site addresses, interests, and professional history, Intelius said. It offers a “Social Network Search” on its website that allows you to enter someone’s name and see a record of social media URLs for that person.

Epsilon, a consumer data company that works with catalog and retail companies, said that it may use information about social media users’ “names, ages, genders, hometown locations, languages, and a numbers of social connections (e.g., friends or followers).”

It also works with information about “user interactions,” like what people tweet, post, share, recommend, or “like.”

But Epsilon said it does not connect this social media information with any other consumer information in its databases. Other companies, including Acxiom, include social media profile data as part of detailed profiles on individual consumers. 

Instead, Epsilon said, it uses information from social media sites to “provide companies with analytics insights” and “help them better understand and interact with their customers.”

Both Epsilon and Acxiom said they obtain information from third parties that specialize in collecting social network data.

Experian, the credit reporting company, said that its marketing services operation “does not collect data from social networks for the purpose of sharing such data with other entities.” It did not say whether or not it uses social network data collected by other companies. (Experian said the data used for its marketing services is “completely separate” from the data used for your individual credit report.)

Markey, the co-chair of the Bipartisan Congressional Privacy Caucus, and a group of other members of congress sent questions to nine companies this July, in response to a New York Times profile of Acxiom, one of America’s largest consumer data companies.

“The data brokers’ responses offer only a glimpse of the practices of an industry that has operated in the shadows for years,” the lawmakers said in a joint statement yesterday on Markey’s web site. “Many questions about how these data brokers operate have been left unanswered.”

“We continue to collaborate with the U.S. government and federal agencies to help broaden the understanding of our business practices and the enormous value that the industry creates for individuals and businesses alike. As such, we advocate for a conversation that balances privacy considerations as well as the benefits of the appropriate use of data,” Acxiom CEO Scott Howe said in an e-mailed statement.

“While we provided a thorough response to the Caucus’ request, we honored all client, partner and vendor confidentiality agreements. We remain focused on our mission to strengthen connections between people, businesses and their partners.”

Yeah, its probably about time to abandon that FB profile if you still have one. Tracking cookies are bad enough, but what these cats are up to is ridiculous. Line me up with this set of data: “This information includes individual email addresses and screen names, web site addresses, interests, and professional history, Intelius said. It offers a “Social Network Search” on its website that allows you to enter someone’s name and see a record of social media URLs for that person,” and I could break into half of your private profiles just by abusing your “security question” that is in place in case you forget your original password. I hope no one with a FB profile hopes to run as a public servant. Your posts will be sold so fast to inquiring minds, and the spun however they wish, that you would never have a chance. God bless the information age.

I thought I posted something earlier, but it seems to have gotten lost.  So, short reconstruction…

It’s terrible (the topic, not the article—I like the article), but not unexpected.  Facebook is basically a smaller version of the Internet, except that someone else owns it and everything you do.  I think most people would be far better off starting their own blog or website, if they want to share information with people.

If you’re going to create for fun, don’t do it to enrich someone else.  Facebook wants us/you to be a trained seal, growing an audience so they can use your free work to sell advertising.  You can tell, based on how they treat your data…

- There’s no posted retention policy, and if you know anyone working there, they’ll tell you they archive everything, down to which profiles and pictures you’ve looked at.
- They reserve the right to use your work IN advertising.
- They make it difficult to extract the things you created on their site for your own purposes.
- They make it insanely difficult to delete your account (disabling doesn’t count, and remember the retention policy).
- They reserve the right to lock you out of the system on a whim, with no mediation.
- They’ve started reducing the number of posts you see in order to encourage you to pay to “promote” your posts, which just undoes their intentional feature-breakage.

When you see that, it’s clear that Facebook is only interested in making you happy to the extent you attract eyeballs to their advertising-laden page.

What I do (and it seems to work) is to just use Facebook as a sign for people to find me.  It’s there to protect my friends from being scammed in my name—they know I have an account and that I don’t use it, so don’t respond to anyone claiming to be me.  I also include my work history, because it improves a person’s chances if they’re trying to contact me and because my work history is easy to find elsewhere online.  And that’s all I do there.

If someone is looking for me, I get the notification of a message, log in, and (if it’s someone I want to talk to) direct them to my e-mail address.

As sort of a cheapo secretary keeping annoying people at arm’s length, it’s great.

But my worry is the next step.  I expect companies to scrape public information sources to make a buck (even though there’s probably a copyright issue that could stymie them).  I tolerate employers to use that information to disqualify candidates.  It’s not great, but it’s acceptable.

However, the obvious place to take this information is into the credit and insurance arenas.  It only takes a handwavy actuarial excuse for a company to say that those bar pictures you’re tagged in mean that your premiums should be doubled.  That bank fraud joke you “liked” five years ago may mean you can’t be trusted with a mortgage.

Thank you Sincerely from the bottom of my heart…this is the second time I’ve learned of facebook giving out personal info from Everybodys acct I tried to post the important details of this on my fb page suddenly my copy& paste will not work but no matter I printed the whole thing & plan to pass the info along to trusting friends & fam this is wrong on so many levels just like vertually all email accts now demanding your phone # to be able to log into your own acct. if thats not an invasion of privacy I dont know what is but again Thank you for these important facts. :)

Just open a new Google phone number and viola! No more NITWITS cause you can monitor all your calls to that number.

Get Updates

Stay on top of what we’re working on by subscribing to our email digest.

optional