Instagram

"Device characteristics and device software. What you're doing on your device, like whether our app is in the foreground or if your mouse is moving (which can help tell humans from bots). Identifiers that tell your device apart from other users'. Device signals. Information you've shared through your device settings (like GPS location). Information about the network you connect your device to."

Meta collects broad device data including mouse movements, device signals, network information, camera roll contents, and voice-enabled feature data — much of which goes beyond what's needed for core social networking functionality.

"Information you've shared through your device settings (like GPS location). Location-related information. Information about the network you connect your device to, including your IP address. Information from cookies and similar technologies."

Meta collects location data through multiple methods including GPS, IP address, and network information, and uses it across nearly every processing purpose listed in the policy — from ad personalization to analytics to cross-company sharing.

"We'll notify you before we make material changes to this Policy. You'll have the opportunity to review the revised Policy before you choose to continue using our Products."

Meta frames continued use as acceptance of new terms. Users are notified of changes but the only option is to stop using the products entirely — there is no meaningful consent mechanism or ability to reject specific changes.

"We share information we collect globally, both internally across our offices and data centers and externally with our partners, third parties and service providers. Because Meta is global, with users, partners, vendors and employees around the world, transfers are necessary."

Meta shares user data with a broad ecosystem including advertisers, Audience Network publishers, analytics partners, measurement vendors, marketing vendors, integrated partners, and other third parties — with information flowing both to and from these entities.

"We keep information as long as we need it to provide our Products, comply with legal obligations or protect our or other's interests. We decide how long we need information on a case-by-case basis. In some instances and for specific reasons, we'll keep information for an extended period of time."

Meta provides no concrete retention timelines, deciding on a 'case-by-case basis' how long to keep data, and reserves the right to keep information for 'an extended period of time' for unspecified reasons.

"For some of these purposes, we use information across our Products and across your devices. The information we use for these purposes is automatically processed by our systems. We share information we collect, infrastructure, systems and technology with the other Meta Companies. We also process information that we receive about you from other Meta Companies, according to their terms and policies."

Meta tracks users across all their products (Facebook, Instagram, WhatsApp, etc.), across devices, and receives off-platform activity data from partners — building unified profiles for ad targeting, personalization, and analytics.

"We keep information as long as we need it to provide our Products, comply with legal obligations or protect our or other's interests. We decide how long we need information on a case-by-case basis. If we need it for other legitimate purposes, such as to prevent harm; investigate possible violations of our terms or policies; promote safety, security and integrity; or protect ourselves, including our rights, property or products."

While Meta mentions the ability to delete information or accounts, the policy reserves broad rights to retain data after deletion requests for vague purposes like 'legitimate interests' and 'extended periods,' with no concrete timeline for when data is actually purged.