Facebook Defends Getting Data From Logged-Out Users
Facebook on Monday defended its practice of gathering data from “Like” buttons even after users have logged out, saying that the collection is part of a system to prevent improper logins and that the information is quickly deleted.
Context & Ripple Effects
Facebook's defense lands in the middle of a deliberate widening of its data surface: Timeline profiles were announced on September 22, frictionless sharing — apps posting to timelines without user action — was confirmed September 25, and a Like Button Chrome extension quietly shipped September 1. Logged-out collection via Like buttons is therefore not an isolated practice but one layer of a system being built to capture activity wherever it happens.
The company's stated rationale — preventing improper logins, with quick deletion — matters because the Like button now sits on millions of third-party pages, meaning the question of what Facebook collects after logout extends well beyond facebook.com itself.
First-order effects
- Users who log out of Facebook but browse sites with embedded Like buttons still transmit data to Facebook, which characterizes the collection as a login-security measure that is deleted quickly.
- Facebook bears the immediate reputational exposure: the same week it launched Timeline and frictionless sharing, it must explain why its tracking does not stop at logout.
Second-order effects
- Publishers hosting Like buttons absorb the trust cost, since their visitors' post-logout browsing feeds Facebook regardless of any visible interaction with the plugin.
- Privacy advocates and regulators gain a concrete test case: if 'quickly deleted' security data is the standard, the burden falls on outside parties to verify what is actually kept.
Third-order effects
- If the security rationale holds as the default justification, embedded social plugins harden into a standing, site-wide data-collection layer across the web, with consent obligations decided by regulators rather than by the platform.
- The episode foreshadows a structural split between platforms that treat logged-out tracking as infrastructure and jurisdictions that treat it as processing requiring explicit consent — a boundary still unset as of this writing.
The trend: Social plugins are converting third-party websites into passive data-collection surfaces for platforms, with the collector's own security claims defining where permission ends.