Imagine a data scientist working at Facebook. Let’s call her Alice. As part of her assignment, Alice collects a couple hundred thousand Facebook users’ profile, stores on her laptop. The data contains not just what users entered into Facebook, but what Facebook gathered and inferred about them. Alice is excited. Users whose data is being used largely trust Facebook to be good custodians of this data.
But Alice’s boyfriend, Bob, has another idea. He knows that the user data Alice has on her laptop can be sold to some data broker. He’s been unhappy where their relationship has been going anyway, his startup going through down rounds while Facebook stock just keeps going up and up.