Facebook buys detailed information from commercial data brokers about users' offline lives but does not disclose it since it is widely available
The site shows users how Facebook categorizes them. It doesn't reveal the data it is buying about their offline lives.
Context & Ripple Effects
This closes out ProPublica's year of probing what Facebook actually knows. The site's own ad-preferences page lets users see how they are categorized, but the reporting shows that picture omits an entire layer: detailed offline attributes purchased from commercial data brokers, which Facebook treats as exempt from disclosure because the data is 'widely available.'
The finding set up the next two years of coverage: a reporter later found Facebook holding a permanent record of deleted friends plus his contact information held by advertisers he had never interacted with, the FT sized the broker market itself with IDC forecasting vendor sales tripling to $10.1B by 2022, and ProPublica's own browser plugins for auditing ad targeting were eventually broken by changes to Facebook's site.
First-order effects
- Facebook's advertisers can target users on offline-broker attributes that never appear in the ad-preferences page, so the transparency tool understates what drives targeting.
- Users checking their profiles have no way to see or correct the broker-sourced layer, leaving the disclosure gap entirely on Facebook's side.
Second-order effects
- Commercial data brokers gain a large, recurring buyer for offline dossiers, reinforcing the demand side of the market IDC projected toward $10.1B in annual sales.
- Independent watchdogs like ProPublica are pushed into building browser-side audit tools to reconstruct what Facebook will not show — tools the platform can and later did break.
Third-order effects
- If undisclosed third-party enrichment becomes standard, platform transparency shifts from what companies say about themselves to what outside researchers can verify — a structural argument for regulator- or researcher-mandated audits rather than self-reported preference pages.
- The pattern points toward 'shadow profile' accountability becoming a distinct regulatory question, separate from consent to on-platform data, as more of a user's file is assembled from sources they never touched.
The trend: Ad-platform targeting is being built on purchased offline data that sits outside each platform's own transparency surface, making independent audits the only real check.