Facebook Shadow Profile: What It Is & How It Affects You

Facebook shadow profiles are data collections that Facebook builds about people who are not logged-in users or who have never signed up for the platform. The term is not an official Facebook term; it was coined by journalists and privacy advocates to describe the practice of compiling information about non-users from data shared by Facebook users, such as contact lists, location data, and browsing activity. The profile is “shadow� because the person it describes cannot see it, access it, or delete it. This article explains what shadow profiles are, how they are created, what data they may contain, and what you can do to limit your exposure.

What Exactly Is a Shadow Profile?

A shadow profile is a dossier of information that a social media platform holds about someone who has not created an account. The term is most commonly associated with Facebook, but the concept applies to other platforms that collect data from third-party sources. For Facebook, the data typically comes from:

• Contact lists uploaded by users who sync their phone or email contacts.
• Information shared by friends who tag you in photos or posts, even if you are not on Facebook.
• Tracking pixels on external websites that send browsing data to Facebook.
• Location data from devices where a user is logged in, potentially including non-users nearby.
• Information from “Find Friendsâ€� features when a non-user’s phone number or email is entered.

The profile is “shadow� because the subject has no access to it, no ability to review it, and no straightforward way to request its deletion. Facebook has never officially acknowledged the existence of shadow profiles as a distinct feature, but internal documents and court cases have referenced the practice of storing data about non-users.

How Facebook Collects Data About Non-Users

Facebook’s data collection about non-users happens through several channels, most of which are indirect. The largest source is contact-uploading. When a Facebook user grants the app permission to access their phone’s contacts, Facebook receives names, phone numbers, and email addresses of everyone in that list—including people who have never signed up. Facebook then matches those identifiers against its user database. If a match is found, it links the data to the existing account. If no match exists, it creates a placeholder profile for that contact.

Another significant channel is the Facebook “Like� button and tracking pixels embedded on millions of websites. When a non-user visits a site with a Facebook pixel, the browser sends a request to Facebook’s servers, which may record the visitor’s IP address, browser type, and the page visited. Facebook can link this to a shadow profile if the same browser has previously been associated with a contact-uploaded phone number or email.

Facebook also receives data from third-party data brokers. In 2018, reports revealed that Facebook had partnerships with data brokers like Experian, Acxiom, and others to obtain offline data such as purchasing history and household income. While Facebook later ended these partnerships, the data already collected may remain.

What Data Does a Shadow Profile Contain?

The exact contents of a shadow profile are not publicly documented, but based on court filings, whistleblower reports, and privacy research, the likely data points include:

• Name, phone number, and email address (from contact lists).
• Profile pictures and photos where you are tagged by friends.
• Location history from IP addresses and device GPS.
• Browsing activity on sites with Facebook pixels.
• Interactions with friends’ posts, even if you do not have an account.
• Inferred interests and demographics based on your contacts’ activities.

Facebook has stated in legal proceedings that it uses such data to “improve user experience� and to show ads to users who may know non-users. For example, if you upload your contacts, Facebook may suggest that you invite a contact who is not on the platform—implying it has enough information to identify that person.

How Shadow Profiles Affect You

If you are a Facebook user, shadow profiles affect you because they are used to target ads and content. Facebook can match your shadow profile with your main account, allowing advertisers to reach you based on data you never provided. If you are a non-user, the effect is different: you have no account, but Facebook may still hold data about you that you cannot access or delete. This data can be used to build a “lookalike audience� for advertisers, meaning you might see Facebook ads even without an account (through third-party sites).

In 2018, the privacy advocacy group Privacy International filed a complaint against Facebook with the Irish Data Protection Commission, alleging that Facebook creates shadow profiles of non-users in violation of the EU General Data Protection Regulation (GDPR). The complaint highlighted that Facebook’s data processing lacks a lawful basis for non-users. Facebook responded that it uses data from non-users only to help users connect with people they know, but privacy experts argue that the scale of data collection goes beyond that purpose.

Can You See or Delete Your Shadow Profile?

No. There is no built-in way to view or delete a shadow profile. Facebook does not offer a “Download your shadow profile� option. If you are a non-user, you cannot request access under GDPR because Facebook does not recognize you as a data subject with an account. Some privacy advocates have tried to force disclosure by filing legal requests, but Facebook has not publicly provided a mechanism.

If you are a user, you can download the data Facebook has on you, but that download will not include the shadow profile data that is not linked to your account. The only practical step is to reduce the amount of data Facebook can collect about you in the future.

How to Limit Your Shadow Profile Exposure

While you cannot erase an existing shadow profile, you can take steps to prevent further data collection:

• Do not upload your contacts to Facebook. Go to Settings > Privacy > Contacts and disable continuous contact upload.
• Use a browser extension that blocks Facebook tracking pixels, such as Privacy Badger or uBlock Origin.
• Log out of Facebook when browsing other sites, and use a separate browser for non-Facebook activity.
• Clear your browser cookies regularly, or use private browsing mode.
• Use a VPN to mask your IP address, though this does not stop all tracking.
• If you are a non-user, ask friends not to share your contact information with Facebook.

Note that these measures reduce future data collection but do not delete data already stored.

Frequently Asked Questions

Is having a shadow profile illegal?

It depends on the jurisdiction. Under GDPR, Facebook must have a lawful basis for processing personal data of non-users. Privacy complaints argue that Facebook does not have such a basis, but no final ruling has been made. In the US, there is no comprehensive federal privacy law, so Facebook’s practices are generally not illegal, though they may be subject to FTC enforcement.

Can I find out if I have a shadow profile?

No. Facebook does not provide a way to check. You can only infer its existence if a friend uploads your contact and Facebook suggests adding you as a friend, which indicates Facebook has your contact information.

Does Facebook sell shadow profile data?

Facebook does not sell personal data to third parties. Instead, it uses the data to target ads within its own platform and to allow advertisers to reach users through its ad system. Advertisers do not receive the raw data; they only get aggregated reporting.

Can a shadow profile be used to target me with ads even if I never use Facebook?

Yes. If Facebook has your email or phone number, it can match you with a shadow profile and serve you ads on third-party websites that use the Facebook Audience Network. You may see ads that seem to know your interests even without a Facebook account.

Does deleting my Facebook account delete my shadow profile?

If you delete your account, Facebook may still retain data about you as a non-user if your contact information appears in other users’ contact lists. The shadow profile would remain, but it would no longer be linked to an active account.

Are other social media platforms doing this?

Yes. Many platforms that offer contact-syncing and tracking pixels, such as Instagram (owned by Facebook), Twitter, and LinkedIn, may also create similar profiles for non-users. The term “shadow profile� is most associated with Facebook, but the practice is not unique.

Related

• Remote Desktop on Chromebook: Setup Guide
• Fix Google Play Store Errors: Step-by-Step Guide
• Fix Overheating iPhone iOS 11: 12 Proven Ways