Social / APP REPORT

Instagram

Meta collects content, activity and device data and receives information from partners; it uses information to personalize ads.

Reviewed 2026-11-13Scope US consumer Instagram; features, settings and rights vary by location and account. Provider statements, not an independent behavioral audit.

THE DETAILS

What the documents say

These findings summarize published documents, not independently observed data practices.

Activity and device data

Meta says it collects content you provide, activity on its products and device information.

Read the source

Explain simply

In plain language

Meta can collect what you share, how you use Instagram and information about your device.

Activity from other businesses

Meta says businesses share activity such as purchases on their websites; Meta uses it to personalize ads and says it is expanding use to content and AI responses.

Read the source

Explain simply

In plain language

A purchase or other activity on a business website can influence ads and other content Meta shows you.

Personalization control

Meta says its Activity from other businesses setting controls whether that activity is used to personalize ads and other content.

Read the source

Explain simply

In plain language

You can control whether Meta uses activity shared by other businesses to personalize what you see.

THE EXPOSURE SCORE

Evidence behind the score

Higher means more documented exposure or friction. Reviewed 2026-11-13 · Scope: US consumer, checked policy and official guidance as of 2026-11-13.

Does the publisher collect usage or activity data?

Yes — The current Meta privacy policy describes information collected about activity on Facebook and Instagram.

Read the source

Does the policy describe collecting precise location, contacts, or user-created content?

Yes — The policy describes collecting content users create and share, including photos and posts.

Read the source

Does it collect user data from third parties?

Yes — The policy describes information received from partners about activity outside Meta products.

Read the source

Is personal data disclosed to advertising or marketing partners, or used for cross-context targeted ads?

Yes — Meta describes using activity sent from other websites and apps to power ads on Facebook and Instagram.

Read the source

Do independent third parties receive data for their own purposes beyond processing it for the publisher?

Yes — Meta makes eligible public Facebook and Instagram posts available to approved independent researchers through its Content Library.

Read the source

Does the policy explicitly describe open-ended retention of any category, including while an account remains active?

Unknown — An open-ended retention period for a specific ordinary-use or active-account data category was not verified; backup retention after deletion is scored separately.

Can identifiable data remain after deletion for legal, security, or business exceptions without a stated maximum for each exception?

Yes — Deletion guidance says information may be retained for legal issues, terms violations or harm prevention without specifying maximum periods.

Read the source

Is self-service account or data deletion unavailable, requiring support or legal contact?

No — Instagram documents a self-service account deletion path in Accounts Center.

Read the source

Does the publisher explicitly require a separate request to delete the account and associated personal data, or say associated account data remains after account deletion?

Unknown — The available official sources do not establish whether deleting the account leaves associated personal data or requires a separate request.

Can an ordinary signed-out user demonstrably not reach both the policy and deletion instructions without login, payment, or contact within three navigations from the official landing page or app-store listing?

Unknown — Research-tool throttling and login redirects do not establish an ordinary signed-out user’s access path within three navigations.