Facebook May Share User Data With External Sites Automatically
Imagine visiting a website and finding that it already knows who you are, where you live, how old you are and who your Facebook friends are, without your ever having given it permission to access that information.
Context & Ripple Effects
The report lands at peak-leverage moment for Facebook: Hitwise had just named it the most-visited U.S. site with 7.07% of visits, edging out Google, days after it cemented its takeover of MySpace. A platform holding that much traffic now floats an unconfirmed plan to let external sites recognize users' identities, locations and friend graphs automatically — flipping the model from sites asking permission to Facebook pushing identity out by default.
Trust is the live fault line. Valleywag's 2007 scoop that Facebook employees could see which profiles users viewed already framed the company's privacy posture as internally asymmetric, and Facebook's own blog post on "Open Site Governance" alongside TechCrunch and GigaOM pickups shows the company trying to frame automatic sharing as openness rather than exposure. With a confirmed location-sharing feed planned for the following month, the stakes of that framing are unusually high.
First-order effects
- Third-party websites could render personalized pages — name, age, location, friend list — for arriving visitors with no explicit grant from the user, making Facebook's identity layer a default web fixture if the rumored plan ships as described.
Second-order effects
- The confirmed location feed due next month compounds the exposure: automatic identity handoff plus friends' real-time whereabouts would make every partner site a potential location-broadcast surface, raising the sensitivity of the same mechanism.
Third-order effects
- If defaults rather than user action define the data-permission boundary, consent migrates from the user to the platform's settings design — the pattern privacy advocates and eventually regulators would have to police at the level of default configurations, not individual disclosures.
The trend: Social platforms are shifting data sharing from explicit opt-in to platform-set defaults, letting the largest identity holder write the web's de facto permission boundary.