Facebook Privacy Concerns

There have been some concerns expressed regarding the use of Facebook as a means of surveillance and data mining. Theories have been written about the possible misuse of Facebook and privacy proponents have criticized the site's current privacy agreement. According to the policy, "We may use information about you that we collect from other sources, including but not limited to newspapers and Internet sources such as blogs, instant messaging services and other users of Facebook, to supplement your profile." However, some features—such as AIM away-message harvesting and campus newspaper monitoring—have been dropped and Facebook has since responded to the concerns. Facebook has assured worried users the next privacy policy will not include the clause about information collection and has denied any data mining is being done "for the CIA or any other group." However, the possibility of data mining by private individuals unaffiliated with Facebook remains open, as evidenced by the fact that two MIT students were able to download, using an automated script, over 70,000 Facebook profiles from four schools (MIT, NYU, the University of Oklahoma, and Harvard) as part of a research project on Facebook privacy published on December 14, 2005.

Another clause that some users are critical of reserves the right to sell users' data to private companies, stating "We may share your information with third parties, including responsible companies with which we have a relationship." This concern has also been addressed by spokesman Chris Hughes who said "Simply put, we have never provided our users' information to third party companies, nor do we intend to." It is unclear if Facebook plans to remove that clause as well.

Recently serious privacy concerns have been raised over the security of 3rd party applications that users may install on Facebook (for example vampires, super poke etc).[citation needed] Third party applications have access to almost all user information and "Facebook does not screen or approve Platform Developers and cannot control how such Platform Developers use any personal information."

Facebook staff has the authority to view profiles in the event that the person is suspected of violating the site's terms of service.

In August 2007 the code used to dynamically generate Facebook's home and search page as visitors browse the site was accidentally made public, according to leading internet news sites. A configuration problem on a Facebook server caused the PHP code to be displayed instead of the web page the code should have created, raising concerns about how secure private data on the site was. A visitor to the site copied, published and later removed the code from his web forum, claiming he had been served legal notice by Facebook.