But using personally identifiable data for targeting (which facebook seems to be doing) is entirely different from doing personally identifiable targetting (which no one is doind). If all the information that leaves facebook servers is which ads to show then it's really difficult to argue that privacy is being breached.