In real life story , in the rude line of conversation , it is not uncommon to talk about a person you may know . You get together someone and say , “ I ’m from Sarasota , ” and they say , “ Oh , I have a grandparent in Sarasota , ” and they say you where they live and their name , and you may or may not distinguish them .

You might assume Facebook ’s Quaker recommendation would forge the same way : You tell the social web who you are , and it secernate you who you might cognise in the on-line world . But Facebook ’s machinery operates on a scale far beyond normal human interactions . And the results of its People You May bang algorithm are anything but obvious . In the months I ’ve beenwriting about PYMK , as Facebook call it , I ’ve hear more than a hundred bewildering anecdotes :

A man who years ago donated spermatozoan to a couple , on the Q.T. , so they could have a tyke — only to have Facebook urge the shaver as a person he should know . He still knows the span but is not friend with them on Facebook .

Article image

Investigating the secret algorithm that knows who you know

A societal worker whose client called her by her nickname on their 2d sojourn , because she ’d demonstrate up in his the great unwashed You May get it on , despite their not having replace contact selective information .

A cleaning woman whose father leave her family when she was six years sometime — and regard his then - mistress suggested to her as a Facebook Quaker 40 year later on .

An attorney who wrote : “ I blue-pencil Facebook after it recommended as PYMK a man who was defence counsel on one of my caseful . We had only communicate through my work e-mail , which is not join to my Facebook , which convinced me Facebook was scanning my work email . ”

Article image

You enter your email address and then your email password, and Facebook will tell you everyone you know on Facebook. Meanwhile, Facebook holds on to all the contacts you handed over.

Connections like these seem inexplicable if you simulate Facebook only knows what you ’ve told it about yourself . They ’re less mysterious if you know about the other data file Facebook preserve on you — one that you ca n’t see or control .

Behind the Facebook visibility you ’ve built for yourself is another one , a tail visibility , progress from the inboxes and smartphones of other Facebook users . Contact information you ’ve never reach the internet gets link with your account , make it gentle for Facebook to more completely map your social connections .

Shadow contact information has been a have it away feature of Facebook forum few years now . But most users stay unaware of its reach and power . Because shadow - visibility connections take place inside Facebook ’s algorithmic smuggled box , masses ca n’t see how deep the data point - excavation of their lives truly is , until an eldritch passport soda water up .

Article image

Facebook is n’t skim the employment e-mail of the attorney above . But it likely has her workplace email address on file , even if she never give it to Facebook herself . If anyone who has the attorney ’s speech in their contacts has chosen to apportion it with Facebook , the fellowship can link up her to anyone else who has it , such as the defense reaction counsel in one of her case .

Facebook will not substantiate how it makes specific People You May bang connections , and a Facebook interpreter paint a picture that there could be other plausible explanation for most of those examples—“mutual friendships , ” or multitude being “ in the same city / web . ” The representative did say that of the stories on the leaning , the attorney was the likeliest case for a shadow - profile connection .

Handing over reference books is one of the first steps Facebook asks people to take when they ab initio bless up , so that they can “ Find Friends . ” The “ Find Friends ” pick on screen background is very basic :

Article image

The “ Find Friends ” pageboy in the Facebook smartphone app is more inviting , presenting a picture of a spray of flowers and invite the user to “ See who ’s on Facebook by incessantly upload your contacts . ”

Down in the fine photographic print , below the “ Get commence ” button , the page state that “ Info about your contacts … will be send to Facebook to help you and others find acquaintance quicker . ” This is vague , and the purpose remains obscure even after you select “ memorize More ” :

When you choose to receive friends on Facebook , we ’ll use and securely store information about your contacts , include things like gens and any nicknames ; contact photo ; phone number and other contact or related info you may have added like coition or profession ; as well as datum on your phone about those contacts . This serve Facebook make recommendation for you and others , and helps us supply a beneficial armed service .

Article image

These privacy settings are an undocumented way to control to whom you get recommended in People You May Know.

Take a look at all the potential entropy associated with a liaison on your headphone . Then think the accumulated information your phone is carrying about various people , whether lifelong friends or passing acquaintances .

Facebook warns users to be judicious about using all this data . “ You may have occupation or personal contacts in your earpiece , ” the Learn More screen admonishes the reader . “ Please only ship friend requests to hoi polloi you make out in person who would welcome the invite . ”

Having issued this warning , and having recognise that people in your address book may not necessarily want to be connect to you , Facebook will then do exactly what it monish you not to do . If you agree to share your contacts , every piece of contact data you possess will go to Facebook , and the web will then use it to attempt to explore for connections between everyone you get it on , no matter how slightly — and you wo n’t see it happen .

Argentina’s President Javier Milei (left) and Robert F. Kennedy Jr., holding a chainsaw in a photo posted to Kennedy’s X account on May 27. 2025.

Facebook does n’t wish , and does n’t use , the terminal figure “ shadow profiles . ” It does n’t like the full term because it sounds like Facebook create obscure profiles for masses who have n’t join the connection , which Facebook say it does n’t do . The existence of shadow contact information came tolight in 2013after Facebook admitted it had name and sterilize “ a hemipteron . ” The bug was that when a userdownloaded their Facebook Indian file , it admit not just their friends ’ seeable inter-group communication info , but also their friends ’ shadow contact lens information .

The job with the hemipteran , for Facebook , was not that all the info was lump together — it was that it had mistakenly shown exploiter the chunk existed . The extent of the connections Facebook builds around its drug user is supposed to be visible only to the caller itself .

Facebook does what it can to underplay how much information it gathers through contact , and how wide it drift its net . “ People You May love proffer may be based on contact information we receive from people and their friend , ” Facebook interpreter Matt Steinfeld wrote in an electronic mail . “ Sometimes this means that a friend or someone you get laid might upload liaison entropy — like an electronic mail reference or headphone identification number — that we associate with you . This and other signal from you serve us to check that that the people we intimate are those you likely already know and want to become friends with on Facebook . ”

William Duplessie

Users of Instagram and WhatsApp , which are owned by Facebook , can also upload contacts to those apps , but Steinfeld said that Facebook does not presently use that data for Facebook friend suggestions . “ Today , we use striking uploaded to Facebook and Messenger to inform PYMK hint , ” he write .

This post was produced by theSpecial Projects Desk of Gizmodo Media . Reach our team by phone , text , Signal , or WhatsApp at(917 ) 999 - 6143 , email us at[email   protected ] , or contact us securely usingSecureDrop .

Through the course of reporting this level , I discovered that many of my own friends had upload their inter-group communication . While promote me to do the same , Facebook ’s smartphone app tell me that 272 of my friends have already done so . That ’s a quarter of all my ally .

Starship Test 9

But bounteous as it is , that ’s not even the relevant routine . When Steinfeld write “ a friend or someone you might know , ” he meant anyone — any someone who might at some breaker point have labeled your headphone bit or email or destination in their own contacts . A one - Nox stall from 2008 , a someone you obtain a couch from on Craiglist in 2010 , a landlord from 2013 : If they ever put you in their phone , or you put them in yours , Facebook could log the connexion if either company were to upload their contacts .

That accretion of link datum from hundreds of people stand for that Facebook probably knows every computer address you ’ve ever lived at , every e-mail address you ’ve ever used , every land line and cell phone number you ’ve ever been associated with , all of your nicknames , any social connection profiles associated with you , all your former instant message accounts , and anything else someone might have added about you to their telephone set book .

As far as Facebook is have-to doe with , none of that even number as your own information . It belong to the users who ’ve upload it , and they ’re the only ones with any control over it .

Lilo And Stitch 2025

It ’s what the sociologist danah boyd call “ networked privacy ” : All the people who recognise you and who take to apportion their contacts with Facebook are make it easier for Facebook to make connections you may not want it to make — say if you ’re in a professing like police , music , societal work , or even journalism , where you might not want to be connected to people you encounter at work , because of what it could reveal about them or you , or because you may not have had a well-disposed confrontation with them .

Imagine the challenge for people trying to defend two different identities , such assex workersor undercover investigators . Not only do you have to keep those identities apart like a security master , you have to make certain that no one else links them either . If just one person you screw has contact entropy for both identity operator and give Facebook accession to it , your worlds collide . Bruce Wayne and Clark Kent would be screwed .

darkness profile datum powers Facebook ’s effort to connect as many people as possible , in as many ways as possible . The company ’s power to comprehend the threads link its billion - plus user around the Earth led it to announce last year that it ’s not six degrees that separate one mortal from another — it’sjust three and a half .

CMF by Nothing Phone 2 Pro has an Essential Key that’s an AI button

With its vast , concealed black book , Facebook can go beyond simply matching you directly with someone else who has your striking information . The web can do contact chaining — if two different masses both have an email address or phone phone number for you in their middleman information , that indicates that they could possibly bed each other , too . It does n’t even have to be an address or phone number that you in person told Facebook about .

This is how apsychiatrist ’s affected role were recommended to one anotherand may be why a man had his unavowed biologic girl recommended to him . ( He and she would have her parents ’ contact data in common . ) And it may explain why a non - Facebook user had his ex - wife recommended to his lady friend . Facebook does n’t keep profile for non - substance abuser , but it does apply their contact information to connect the great unwashed .

“ Mobile speech sound turn are even better than societal security system numbers for name masses , ” say security system applied scientist Bruce Schneier by email . “ mass give them out all the time , and they ’re powerfully link up to identity operator . ”

Photo: Jae C. Hong

Facebook wo n’t tell you how many citizenry who are n’t your booster have reach over your inter-group communication selective information . The cognitive content of your shadow profiles are not yours to see .

AsViolet Bluewrote in Cnet at the time of the phantom - visibility bug , “ What the divine revelation means is that Facebook has much more entropy on us than we roll in the hay , it may not be exact , and despite everyone ’s best movement to keep Facebook from love our phone numbers or work electronic mail address , the societal meshwork is get our not - for - portion out number and email addresses anyway by stealing them ( albeit through ‘ licit ’ way ) from our friends . ”

What if you do n’t care Facebook having this data point about you ? All you need to do is recover every person who ’s ever gotten your contact lens information and uploaded it to Facebook , and then call for them one by one to go toFacebook ’s contact management pageand delete it .

Doctor Who Omega

Just do n’t neglect anyone . “ Once a inter-group communication is cancel , we remove it from our arrangement — but of form it is potential that the same impinging has been uploaded by someone else , ” Steinfeld write in an email .

The shadow profile , like the multitude You May Know system they feed into , ca n’t be turned off or opted out of . The one affair you may do to impede Facebook ’s contacts - based connections is , through its Privacy options card , keep people from bump your profile by research your earphone number or email address . ( Yes , Facebook functions as a reverse phone - number look - up avail ; under the default options , anyone can put your earphone number into the lookup saloon and pull up your account . )

“ allow ’s say you ’ve shared your earpiece number [ or email address ] with a lot of the great unwashed and do n’t want stranger using it to search for you on Facebook , ” Steinfeld spell . “ you’re able to limit who can seem you up on Facebook by that telephone act [ or e-mail address ] to ‘ acquaintance . ’ This is also a signaling that People You May Know use . So if a stranger uploads his reference book including that phone number [ or email computer address , it ] wo n’t be used to indicate you to that alien in hoi polloi You May Know . ”

Roborock Saros Z70 Review

But you’re able to only block People You May make love from using information you ’ve actively provided to Facebook , not what ’s in your shadow profile . So to protect your privacy , you need to leave Facebook with even more info about you .

I asked if Facebook would study sharing shadow profile information with its users , much like it accidentally shared it with their friends four years ago . Facebook says it ca n’t because it would be a privateness violation of those who yield the info .

“ When you choose to upload your touch to Facebook , we moot your privacy along with the privacy of the protagonist , household , and others who gave you their phone number or electronic mail address , ” enjoin Facebook representative Matt Steinfeld by e-mail . “ We acknowledge that multitude might want to see the contact information that ’s been uploaded about them to Facebook , but we also have a responsibility to the people choosing to upload this information . This is a balance and we ’ll continue heed to people ’s feedback . ”

Steinfeld also said that while Facebook does n’t currently “ declare oneself a elbow room for people to manage the contact information others have uploaded that might be bear on to them , this is something I ’ve share with the squad . ”

As common , I asked to speak with the People You May Know team directly , but was turned down .

FacebookPrivacy

You May Also Like