P0 basic Identity

Meta Account Privacy Lockdown

Replaces: Default Meta/Facebook/Instagram/WhatsApp settings (all tracking on)

Disconnect off-Meta activity tracking, disable ad personalization, and never use the in-app browser.

Sources

big-tech-surveillancedata-breach

Phase

Settings Changes — no install, no account, 5 min

General

Meta tracks you even if you've never made a Facebook account — via the Facebook SDK embedded in third-party apps, the Meta Pixel on websites, and Conversions API server-side tracking. Lock down what you can:

1. Accounts Center (accountscenter.facebook.com): Go to "Your information and permissions" → "Your activity off Meta technologies" → "Manage future activity" → "Disconnect future activity." This doesn't stop tracking but tells Meta not to tie off-platform activity to your account
2. Ad preferences: Turn off "Use of off-Meta activity for ads" and customize what info advertisers can use
3. In-app browser: NEVER use Facebook/Instagram's in-app browser — it sees everything you type, every form you fill. Always open links in your real browser
4. App permissions: Revoke camera, microphone, location, and contacts access from all Meta apps. Use browser version instead of the app
5. WhatsApp: Turn off "Share data with Meta" (EU/UK only). Outside EU: revoke all app permissions. Metadata (who you message, when) is always visible to Meta regardless of E2E encryption
6. Instagram: Use in browser, not the app. The app has been caught listening on local ports (2025), scanning frames for brand logos, and inferring emotional states from viewing patterns
7. AI training: EU/UK/EEA residents can opt out of AI training. Everyone else is opted in automatically
8. Meta Pixel: Use a privacy browser with uBlock Origin to block the Meta Pixel on third-party websites. Check sites with The Markup's Blacklight tool
9. Meta Ray-Ban glasses: Use the Nearby Glasses app to detect smart glasses nearby

Meta keeps shadow profiles even if you quit all platforms — if a friend uploads a photo with you, if you use an app with the Facebook SDK, or if you visit a site with the Meta Pixel, you're in their system. The goal is to dim the lights, not turn them off.

Research Findings

Meta's surveillance extends far beyond its own platforms: (1) Facebook SDK is embedded in thousands of non-Facebook apps, giving Meta data on non-users. (2) Meta Pixel on websites can see form inputs, cart contents, and match you to your Facebook account even if logged out or blocking cookies. (3) Conversions API is server-side tracking that bypasses all browser-level protections entirely — nothing the user can do except pressure websites to stop using it. (4) Instagram app was caught listening on local Android ports (2025), creating a backdoor to exfiltrate data from other apps. (5) Meta feeds all public posts, photos, comments, and interactions into its AI model — and once data is in the AI model, it cannot be deleted. (6) Meta Ray-Ban glasses send footage to annotation workers in Kenya who saw private moments, banking info, and people having sex.