Not that I want to defend Facebook, but that person entered into an agreement laid out by Facebook's terms of service and privacy policy (lol), not the privacy policy set by this plugin.
But I don’t remember the TOS says “you promise not to let anyone see the ads we show you” (remember this isn’t the user data that’s being collected)