Research from an ex-Google engineer has found that Meta has been putting code in different websites to track its users' activity outside Facebook and Instagram. Several reports have said that Meta is capable of tracking text choices and text input, these include passwords, emails, and other confidential details of the users by just clicking a link inside the two applications using the "in app browser."
A photo of the META logo during the US social network Instagram opening on a tablet screen in Moscow on November 11, 2021. - Facebook chief Mark Zuckerberg announced the parent company's name is being changed to "Meta" to represent a future beyond just its troubled social network.
by KIRILL KUDRYAVTSEV/AFP via Getty Images
Google's Former Employee
Felix Krause, the privacy researcher and the ex-Google engineer said that tracking codes were injected into every website shown and these are clicking on ads, enabling them to monitor interactions, like every button and link tapped, text selections, screenshot, and even passwords and credit card numbers.
The report also stated that the two platforms inject Meta Pixel, a tracking JavaScript code, in all links and websites. Through this, it allows the applications to track the browsing history of the users on an external website with their consent.
Meta's Response to the Issue
Meta released a statement that states that "We intentionally developed this code to honour people's [Ask to track] choices on our platforms," a spokesperson said. "The code allows us to aggregate user data before using it for targeted advertising or measurement purposes. We do not add any pixels. Code is injected so that we can aggregate conversion events from pixels."
They also added that the company seeks the users' consent whenever they save payment information. This was done for the purpose of "Autofill" feature,
Gathering Health Information for Targeted Advertising
Only last week, Jane Doe, an anonymous user filed a lawsuit to Meta as it has been harvesting the health information of the users through patient portals online. The lawsuit claims that its purpose is for targeted advertising.
The lawsuit states that the sensitive medical information of the users that are supposed to stay confidential are absorbed in Meta Pixel such as health conditions, diagnoses, and test results. Following Jane Doe's lawsuit, Meta's response for this was not immediate yet the company stated that this kind of information is filtered out from its ad systems as the company has its own policies.
In California federal court, a complaint was filed under the name of John Doe as Facebook received at least 664 hospital system or medical provided websites via its Pixel tracking tool.
A partner at Labaton Sucharow LLP who is represnting consumers in a similar data-sharing case najmed Carol Villegas stated via Bloomberg Law "These hospitals have an obligation to patients to provide them with notice on where their medical information is going,".
