Mark Zuckerberg, 2016.
Internet |Analysis

Facebook may promise privacy but business model is built on its absence

  1. Almost every Facebook user scraped by 'malicious actors'
  2. 'Facebook makes selling our attention to advertisers'
  3. The true customers are advertisers and politicians
  4. 'You have zero privacy...get over it'

Talk (11)


Chuck Thompson


Chuck Thompson

"I'd like to expand on Josh Lewis's co..."
Josh Lewis

Josh Lewis

"Robert, why not just improve the stor..."

Robert Petersen

"I agree with Jimmy that this story is..."

Facebook users who Mark Zuckerberg once referred to as “dumb fucks” in early 2004 are now facing up to the reality behind that insult. With admissions from the company that almost all its 2 billion users probably had their data harvested by “malicious actors,” and that 87 million – not 50 million – profiles were probably used by Cambridge Analytica, the business model powering Facebook is being laid bare.

Cambridge Analytica denied it used any more than 30 million profiles, saying they were gained under an agreement with a Cambridge University academic. However, Facebook’s latest disclosures suggest nearly three times that number. Perhaps more significantly, the social network acknowledged that virtually every users’ data may have been open to being gathered.

Facebook said in a blog post that “malicious actors” took advantage of its platform, admitting that “most people on Facebook could have had their public profile scraped.” Facebook didn’t disclose who the malicious actors are or how the data might’ve been used, but said it’s working to close the gaps in its policy and security.

That a company valued at nearly $500 billion could not afford – or rather did not try – to implement stronger privacy from the start is telling to the critics who described the essence of the free-services-for-personal-data model as: “You are the product” (Longform).

Facebook is scrambling to save its reputation by saying it will close loopholes and push out new privacy measures. But with this action, the company risks allowing its critics to infer that privacy wasn’t its main concern all along. Rather, its interests had always been the commercial exploitation of the “dumb fucks,” not its motto of “bringing the world closer together.”

Zuckerberg has agreed to appear before the United States Senate judiciary and commerce committees and the House energy and commerce committee, and will send top lieutenants to other inquiries worldwide. Since the scandal, Facebook says it will increase its privacy restrictions with new, more transparent policies. These include making it easier for users to see the data Facebook has on them, and no longer providing information from data brokers to advertisers – though of course it will continue to sell directly to advertisers.

Discuss what matters to you


‘They trust me…’

“They ‘trust me.’ Dumb fucks.” Those two sentences forever haunt Mark Zuckerberg. The billionaire made the statement at age 19, when his social network was in its fast-growing infancy. Now, of course, it’s a money-machine with a revenue over $40 billion in 2017, a 47 percent increase on the previous year.

That revenue is based on access to more than 2 billion users, many of whom, judging by reaction to the recent scandal, are becoming ever-more aware of Facebook’s motives behind the use of their data.

It’s been nearly 20 years since Sun Microsystems then-CEO Scott McNealy told Wired: “You have zero privacy anyway. Get over it.” Zuckerberg echoed the sentiment in 2010, predicting that as social media grows, privacy will no longer be a “social norm.

‘The problem is the hijacking of the human mind’ – former Google ethicist

That the Cambridge Analytica scandal wasn’t technically a data leak because it was based on legal agreements is beside the point. For many of its critics, the real problem is a laissez-faire approach to user privacy that happens to be central to Facebook’s business model.

“Privacy has always been a relative issue for the companies that dominate the consumer internet economy,” wrote Richard Waters in the Financial Times (may be behind paywall). “It is not about aspiring to some absolute standard for protecting user data: instead, what matters are the generally accepted standards of the time.”

Jörg Pohle, a researcher at the Berlin-based Humboldt Institute for Internet and Society, told WikiTribune that Facebook has never shown it cared about privacy. “There are many competing understandings and interpretations of privacy, and related concepts like surveillance or data protection…

“Nothing in Facebook’s policy documents indicates that Facebook understands your privacy as something that needs to be protected against Facebook itself.”

Sheryl Sandberg, Facebook’s COO, this week acknowledged that the company may have got the “balance” between openness and privacy wrong. “I think we were very idealistic and not rigorous enough,” she told the Today show.

Facebook’s just being Facebook

Industry analysts say Facebook’s very structure has virtually ensured that the platform was rife for exploitation, and that data misuse was inevitable. Historically, the site has limited privacy shields for personal data across the network. Perhaps, then, the scandal over Cambridge Analytica is better seen as a result of Facebook’s DNA, not a bug or unforeseen flaw in the system

For someone like Andy Yen, CEO of ProtonMail, the free, encrypted and self-destructing email service famously used by Cambridge Analytica CEO Andrew Nix, Facebook’s centralization of personal data has always been the problem.

“People talk about regulation, control, security, but I don’t think it matters whether the data was sold, hacked or breached.” Yen told WikiTribune. “That’s not the key point. The fact that this data exists causes a clear, present danger.”

It’s not that Facebook lacks the means to build privacy safeguards into its system – it’s simply not in its financial interest to do so, he said. “It’s not a technical limitation of the internet,” said Yen. “It’s entirely a business limitation.”

You can edit and add more


The social network dominates the advertising technology space called “ad-tech.” Ad-tech is an umbrella term for software tools that help companies target, deliver, and analyze their advertising efforts.

Facebook invests heavily in ad-tech because it makes its money by monetizing users’ data for advertising. Lots of money. The Facebook News Feed – most people’s primary gateway into the platform, for example, accounts for more than $30 billion of the site’s annual advertising revenue, according to Fast Company. Overall, its ad revenue is more than $40 billion

“Facebook makes money … by profiling us and then selling our attention to advertisers, political actors, and others,” wrote techno-sociologist Zeynep Tufecki in the New York Times. “These are Facebook’s true customers, whom it works hard to please.”

Tristan Harris, a former design ethicist at Google, said that subtle techniques, such as the Facebook “Like” button, are designed to keep people on the site, so that profitable attention does not slip away.

The problem is the hijacking of the human mind: systems that are better and better at steering what people are paying attention to,” he told Wired.

Did Facebook ever care about our privacy?

“People don’t care about privacy until they do,” Brent Mittelstadt, a research fellow at the Oxford Internet Institute, told WikiTribune.

Facebook users are no different.

Over the years, Facebook’s porous and heavily commercial approach to privacy has resulted in numerous mea culpas (see list below). In 2007, Zuckerberg issued a public apology over a Facebook program called Beacon, which allowed companies to track users’ purchases without their permission. In 2011, the company came to an agreement with the Federal Trade Commission over its alleged misbehavior in creating a false impression of privacy, including accepting regular privacy audits. 

These were only few of the milestones along the way in the recurring issue of Facebook’s handling of privacy. They were warnings, but generally the rumpus would die down as millions of people continued to “Like” and “Share.” Privacy settings were there – if not obvious or easy, as Matt McKeon of the Electronic Frontier Foundation reported in 2010. But, much like the Terms and Conditions the masses famously ignore (The Guardian)privacy settings were a chore that many just ignored.

You can edit and add more


Andrew Keen, author of The Internet is Not the Answer, told WikiTribune that Facebook’s convenience and free service is why “people don’t want it to have bad repercussions, they’d rather not think about it.”

“It’s free, so why wouldn’t you want to believe in all the nonsense that Zuckerberg tells everyone?” Keen said. “But then when it becomes clear that they are actually mining our data, people have to make hard choices.”

To delete or not to delete

The #DeleteFacebook movement flared up briefly after the Cambridge Analytica scandal. It gained steam when Tesla and SpaceX CEO Elon Musk and Whatsapp co-founder, Brian Acton, joined the global chorus of critics. The lack of a viable alternative (TechCrunch), however, means these movements are unlikely to have significant impact.

“The ‘delete Facebook’ thing is one solution for a certain type of user,” said Mittelstadt at the Oxford Internet Institute. “For people concerned about their privacy, it can be step in the right direction. But this is also ignoring the fact that, in a lot of countries, Facebook is essentially the internet. So it’s not helpful in that context.”

Facebook’s monopoly allows it to gather users’ data even if they’re not on Facebook. It’s the reason why it acquires other platforms such as Instagram, with 800 million monthly users, and WhatsApp, with 1.5 billion monthly users. Facebook itself hit more than 2 billion monthly users in 2017.

Knowing this, internet browser developer Mozilla announced in March an add-on called Facebook Container that hides the identity of Facebook users from the rest of the Web.

“The difference is that it will be much harder for Facebook to use your activity collected off Facebook to send you ads and other targeted messages,” according to Mozilla. The add-on is an option for those who don’t want to delete Facebook but want to protect their privacy.

Security will not change business model

As the world becomes more digitized, more data-driven, privacy will be harder to maintain and cyberattacks more of a pressing risk. New regulations, such as Europe’s General Data Protection Regulation (GDPR) and Germany’s NetzDG, will set new rules for how Facebook can operate in Europe. Zuckerberg said he expects to use the European GDPR system as a guideline for the type of privacy protection the company should offer throughout the world.

But for ProtonMail’s Yen, the internet’s entire business model needs to be revised, as well as the perspective of users.

“The whole business model of mining data, to serve ads to make money, that is fundamentally a flawed model,” he said. “You cannot really add security or add safeguards to fix business models.”

Discuss what matters to you


The rolling debate over online privacy is becoming more about who gets to control the information than strictly keeping information secure. Despite technically being an open, social platform, Facebook’s centralization of information, Yen explained, “is a huge risk to not only privacy but also to democracy as a whole.”

Tim Berners Lee, inventor of the Web, said his intention for it was the distribution of information that can be universally accessed. But it’s perhaps the prescient words of sci-fi writer William Gibson that better reflects today: “The future is already here, it’s just not evenly distributed.”

The looming problem is that most of the world’s information is concentrated in the hands of one-half of a duopoly (WSJ). Such concentration of information in a system with weak privacy designs make it easier for “malicious actors” to exploit information technology for propaganda and psychological operations. If Facebook continues this way, those “hellish two yearsWired described in February are far from over.

Timeline of Facebook’s privacy developments

  • 2004 – Facebook launches as The Facebook, a Harvard University social network. Mark Zuckerberg makes his infamous “dumb fucks” comment, referring to its early users’ naiveté in trusting him.
  • 2006 – Harvard researchers working on a psychology project use information from profiles of users without asking their permission (Chronicle of Higher Education).
  • 2011 – Facebook opens user information and activity to app developers.
  • 2011 – Facebook comes to agreement with U.S. Federal Trade Commission over its misbehavior in creating a false impression of privacy, including accepting regular privacy audits.
  • 2014 – Psychological experiment measures subjects’ moods after being shown negative news stories, sparking outrage from those who felt they were manipulated. Facebook announced new guidelines on how to approach such experiments in the future. 
  • 2018 – In January, Facebook announces new “privacy center,” which it says will make protecting privacy easier by putting all privacy settings in one place.
  • 2018 – Cambridge Analytica scandal breaks in March. Facebook introduces new privacy measures and tools already in development to comply with Europe’s forthcoming General Data Protection Regulation.

Started by

United Kingdom
Linh is a staff journalist at WikiTribune with a background in the humanities. She covers the Middle East, Asia, conflict and technology. Though based in London, she has freelanced across Asia, the UK and U.S.

History for stories "Facebook may promise privacy but business model is built on its absence"

Select two items to compare revisions

17 April 2018

20:54:17, 17 Apr 2018 . .‎ Linh Nguyen (Updated → added transcripts)

09 April 2018

10:47:37, 09 Apr 2018 . .‎ Linh Nguyen (Updated → format)
10:46:06, 09 Apr 2018 . .‎ Linh Nguyen (Updated → typo)
10:45:00, 09 Apr 2018 . .‎ Linh Nguyen (Updated → said not says)

08 April 2018

21:29:23, 08 Apr 2018 . .‎ Charles Anderson (Updated → publish)
19:55:13, 08 Apr 2018 . .‎ Arne Klein (Updated → Jörg Pohle, not Jorg:

07 April 2018

23:29:52, 07 Apr 2018 . .‎ Robert Sauve (Updated → Removed extra word: "Not its of motto of" to "not its motto of")

06 April 2018

19:45:19, 06 Apr 2018 . .‎ Linh Nguyen (Updated → format)
18:03:04, 06 Apr 2018 . .‎ Peter Bale (Updated → Shorter headline)
16:55:06, 06 Apr 2018 . .‎ Linh Nguyen (Updated → allowing TALK)
16:48:02, 06 Apr 2018 . .‎ Linh Nguyen (Updated → tweak)
16:43:36, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
16:37:04, 06 Apr 2018 . .‎ Linh Nguyen (Updated → users')
16:35:45, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
16:28:23, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
16:22:13, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
16:14:12, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
16:11:00, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
15:59:26, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
15:58:17, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
15:57:29, 06 Apr 2018 . .‎ Linh Nguyen (Updated → links)
15:44:02, 06 Apr 2018 . .‎ Peter Bale (Updated → Updating timestamp)
15:36:48, 06 Apr 2018 . .‎ Peter Bale (Updated → fixing apostrophe)
15:36:26, 06 Apr 2018 . .‎ Peter Bale (Updated → Publishing PGB)
11:52:53, 06 Apr 2018 . .‎ Linh Nguyen (Updated → added buttons)
11:46:26, 06 Apr 2018 . .‎ Linh Nguyen (Updated → said)
11:46:05, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
11:45:16, 06 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
11:42:45, 06 Apr 2018 . .‎ Linh Nguyen (Updated → adding suggestions)
10:49:32, 06 Apr 2018 . .‎ Peter Bale (Updated → Parking for one or two additional bits)
10:05:13, 06 Apr 2018 . .‎ Linh Nguyen (Updated → waiting for PB)
09:57:05, 06 Apr 2018 . .‎ Linh Nguyen (Updated → tidying up edits)

05 April 2018

22:03:53, 05 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
22:02:35, 05 Apr 2018 . .‎ Linh Nguyen (Updated → breaking up paragraphs)
22:00:49, 05 Apr 2018 . .‎ Linh Nguyen (Updated → tweaking)
21:54:10, 05 Apr 2018 . .‎ Linh Nguyen (Updated → typo, edits)
18:34:10, 05 Apr 2018 . .‎ Chuck Thompson (Updated → Tweak lede, some Yank style)
15:06:24, 05 Apr 2018 . .‎ Angela Long (Updated → CA denial, '30m on ly')
15:04:47, 05 Apr 2018 . .‎ Angela Long (Updated → tightening intro)
14:33:27, 05 Apr 2018 . .‎ Linh Nguyen (Updated → GSR)
14:10:31, 05 Apr 2018 . .‎ Linh Nguyen (Updated → rather)
14:07:46, 05 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
14:07:23, 05 Apr 2018 . .‎ Linh Nguyen (Updated → editing)
13:53:24, 05 Apr 2018 . .‎ Linh Nguyen (Updated → drafting)
13:47:09, 05 Apr 2018 . .‎ Linh Nguyen (Updated → past tense)
13:43:51, 05 Apr 2018 . .‎ Linh Nguyen (Updated → its)
13:43:13, 05 Apr 2018 . .‎ Linh Nguyen (Updated → his not this)

Talk for Story "Facebook may promise privacy but business model is built on its absence"

Talk about this Story

  1. Other

    I don’t remember Facebook ever promising privacy. They have always been pretty obvious about the diminution of privacy as part of the business model. Consumers lurched toward the platform without considering the implications. Facebook reminds me of Napster . . . The corrupt intent was the only original idea.

  2. Rewrite

    This story is not even remotely neutral.

    1. Rewrite

      What would you change, Mr. Wales? The reality with Facebook seems to actually be this bleak. Maybe there’s too much emotional language?

    2. Rewrite

      I agree with Jimmy that this story is egregiously non-neutral. Other recent Facebook stories have been as well, worse than other journalistic outlets (which often have strong anti-Facebook bias because of the impact on the publishing industry). WikiTribune has to be better than this. Until it is, I have decided to cancel my subscription donation.

      1. Rewrite

        Robert, why not just improve the story instead? That’s more in the spirit of WikiTribune, I think.

      2. Rewrite

        I’d like to expand on Josh Lewis’s comments. I didn’t have a problem with this story when it was published. On the contrary, I thought it was thoughtful, well researched and insightful. Then again, I’ve never been an FB cheerleader. Although I have an FB account, I’m not very active in part because I’ve always been skeptical of what FB is up to with my data. I happen to think that’s objective fact. But that’s beside the point here.

        More important to call to the attention of Robert Petersen or community members like him who might see something on the site they object to is that word up in the top left corner of this page: Pilot. And the first line of Jimmy Wales’ article, “Hello, world: this is WikiTribune.” His opening line reads: “Welcome to WikiTribune, a pilot project for a new approach to journalism where the community is at the center.”

        I can say with 100% assurance that no one at WikiTribune is out to write a bad story or anger the community or cross some line that will inspire the type of “cancel my subscription” rant associated with those old SI Swimsuit Issue letters to the editor.

        Although I’ve never met her in person, I’ve had enough interactions with the writer of this piece to know that she’s a highly intelligent, thoughtful and dedicated writer and journalist—which in my estimation also means she’s a top-notch researcher and an open-minded thinker. Certainly I’ve had enough exchanges with her to know that if someone offers a cogent and reasonable criticism of her work, she’s intellectually big enough to give that criticism full consideration. Also wise enough, if she felt it was merited, to take a step back from her work and say, “You know, maybe I could have phrased that section differently.” Or even, again if the point were valid, to say, “I made a mistake, let’s fix that.” (BTW, I can make the same claim without exception for every other person I’ve dealt with at WikiTribune.)

        That’s the “community” part of the WikiTribune mission. There are decent, fair-minded people trying to make this site as good as it can be. Everyone WANTS constructive criticism here, the “community” benefits from it. It’s actually REWARDING to know that smart, balanced people are critiquing and improving your work. Comments that function simply as thinly veiled insults with no effort to make things better do nothing but impede our progress.

        The reason “pilot” is up there in the corner is to indicate this site is evolving, to recognize that it isn’t perfect and that the only way it’ll get closer to that elusive goal of perfection is with a community that’s committed to engaging in thoughtful feedback and respectful disagreement.

        I happen to like this story but I just reread it in light of Robert Patterson’s note. Again, I found it fair and illuminating. Personally, I found the “dumb fucks” line fair game—Zuckerberg said it, others have echoed it. But I’ll admit I did find a couple of lines that I can see another person fairly thinking did veer out of the pocket of neutrality. The paragraph that begins “Facebook is scrambling to save its reputation …” goes rather far down the road of speculation and perhaps without backup sources.

        I’d like to suggest to community members who might find these sorts of criticisms to make in this or any story on WikiTribune, that a more reasonable approach might go something like this: “This story makes a number of valid points about Facebook and Mark Zuckerberg, but I feel some of the language is hyperbolic and some of the statements unsubstantiated. Specifically, I don’t think it’s neutral to say XXXX.”

        Or maybe note (fairly) that WikiTribune has also published a lengthy Q&A with the hardly neutral FB super-fan Don Graham and maybe suggest something like: “To balance this story out, how about linking it to the Don Graham story or adding a Don Graham quote to this piece?”

        Better still, hit that “edit story” button to the left of “talk” and go into the story and suggest some changes yourself. Rather than giving in to the easy “I’m going home and taking my ball with me” reaction, become part of the community. Help this site get past the “pilot” stage with constructive criticism instead of the kind of knee-jerk negativity WikiTribune is meant to be an anecdote for.

        1. Rewrite

          And I’ll correct myself by noting “anecdote” should be “antidote.”

  3. Rewrite

    Thank you for the long and detailed story. It details well the concerns people should have about using Facebook.

    One thing that I wish articles would focus on (and I’m definitely not singling you out here) is breaking down ‘data’. It’s in danger of becoming a scare word of the year in its vagueness. There’s at least two kinds of data at play here:

    1) Data we* knowingly, willingly give to Facebook, such as what we did today and who our friends are. We hope privacy features mean only those people we want to see it see it, but we give it to them specifically so that some people can see it. We have to expect that Facebook will use this to market to us.

    2) Data we inadvertently give to Facebook, such as all the things we click on there, how long we look at each page, and the cookies from other sites visible to our web browsers. We don’t want anyone to see this, except when we expressly turn it into #1 above by posting it on our feeds. This data is what we should consider the real loss of privacy, and that we don’t want Facebook to use to market to us.

    * I’m not personally on Facebook

    1. Rewrite

      Thanks William. Fair point that “data” has become a blurry all-encompassing word and it should be defined more often.

    2. Rewrite

      “We have to expect that Facebook will use this to market to us”.

      I’m not sure that the typical Facebook user even accepts this. If someone has it set up that “only my friends can read my comments”, they don’t intuitively feel that “Facebook itself” can read them and benefit from them. Just like we don’t expect the postal service to steam open our in-transit letters and profit from what they read there.

Subscribe to our newsletter and be the first to collaborate on our developing stories:

Support Us

Why this is important and why you should care about facts, journalism and democracy

WikiTribune Open menu Close Search Like Previous page Next page Back Next Open menu Close menu Play video RSS Feed Share on Facebook Share on Twitter Share on Reddit Follow us on Instagram Follow us on Youtube Connect with us on Linkedin Email us Message us on Facebook Messenger Save for Later