All that they can get for sure is that you know someone.
That's way more limited compared to all of your thoughts likes dislikes beliefs location family members pets, etc that people share when logged in.
My point is that we complain about Facebook stealing our data but then log in to Facebook and freely give it to them.
Instead of waiting for the govt or some big regulatory entity to slap Facebook we can do it ourselves and just delete Facebook.
Why do you think people don't just do that?
I deleted FB, Insta and Twitter, and lost nothing. My life got better.
That's all they know for sure.
it's something but not much.
"Did Jane attend <event>?"
"Do you work with Jane an FooCorp?"
etc etc etc
Each of these is insignificant and noisy, but when aggregated it allows 99.9% predictions on stuff like "who are you voting for", "how much do you earn", "are you expecting a child", "are you buying a house/car/trip/anything significant soon", "how's your health", "are you sleeping well", "where do you live", "are you on a trip", etc.
People get ads about health issues before they realize they have these issues, because the Algorithm knows better.
When you have enough noisy uncertain data it doesn't matter that it's uncertain and noisy.