Facebook admits using your two-factor-authentication phone number for ad targeting

Facebook has admitted using the phone number provided by the user (for two-factor-authentication) to target them with ads. The original purpose of the two-factor-authentication (2FA) is to improve account security, however, Facebook is using the phone number to make more ad dollars. This news comes in the wake of a Gizmodo report.

In a statement to TechCrunch, Facebook acknowledged this, “We use the information peoTechCrunch to offer a better, more personalized experience on Facebook, including ads. We are clear about how we use the information we collect, including the contact information that people upload or add to their own accounts. You can manage and delete the contact information you’ve uploaded at any time.”

Basically, how all of this works is, for example, if you include your mobile number to your Facebook profile and you also provide that phone number to some online store, that phone number can then be matched and hence that store can identify you as a customer. You will then be served with an ad directed towards you. So a clothing brand can put an ad for a dress in the Instagram feeds for men or women who have purchased from them before, a politician can place Facebook ads in front of anyone on his mailing list, or a casino can offer deals to the email addresses of people suspected of having a gambling addiction.

The interesting thing is Gizmodo claimed that Facebook will continue to do this even if you did not provide your phone number to your Facebook profile. It will collect your number through your cell number verification.

However, Facebook started giving users more 2FA alternatives last year, which included USB key support, followed by the permission to use third-party authenticators apps in. The company also came under fire in February for spamming 2FA phone numbers with code, the company, however, blamed that on a bug.