Mark Zuckerberg stated in Congress in 2018, "We do not sell data to anyone." The New York Times reported the same year, based on internal documents and interviews with about 50 former employees, that while the company does not sell user profiles at retail prices, it has signed data-sharing agreements with dozens of Silicon Valley companies. Partners gained deeper access than publicly disclosed, including unreported email and phone number quantities.

Before 2014, third-party applications could access a user's friend graph through that user. Cambridge Analytica collected data from about 87 million people using a quiz app by Aleksandr Kogan for voter profiling. The FTC determined in 2019 that the company deceived consumers, imposing a $5 billion fine on Facebook and modifying a 2012 privacy order, stating that it had not adequately controlled known violating applications.

The Times investigation specified that after policy tightening in 2014, companies like Microsoft and Amazon still received hundreds of millions of user-related fields monthly. The exchange was not cash invoices but rather installations, activity, and advertising inventory: partners used data to bring people back to Facebook, and Facebook sold ads at higher prices based on active time.

The packaging method was platform interfaces plus whitelists, rather than listing forms on data broker shelves. Users faced "Log in with Facebook" and "Allow app" without seeing the backend contracts that wholesale friend relationships, likes, and contact information to device manufacturers and content partners.

After the 2018 crisis, the company reduced developer interfaces and accepted stricter consent rules in the EU. The advertising business continued to operate based on behavioral targeting, merely changing the terms from "selling" to "sharing" and "personalization."

In market mechanisms, what is sold is targeted attention, and what is bought is access to profiles that do not appear on invoices. Funds flow from advertisers to platforms, and data flows from users to applications and device partners; the beneficiaries are platforms that can exchange login buttons for growth, while the pressured are users who believe that turning off ad personalization cuts off graph output. The event-driven aspect comes from old files being reintroduced, compared to today's agency and personalization products.

Source: Public Information