Meta takes three times more of your personal data than Apple or Microsoft

Recent research from Surfshark indicates that Meta collects an average of 25 unique data types per app. This figure is three times higher than the averages for Apple and Microsoft. The study analyzed 171 apps from the Apple App Store, focusing on the data collection practices of five major tech entities: Google, Microsoft, Apple, Amazon, and Meta. Researchers tracked 35 specific data categories, including browsing history, precise location, and purchase data.

Meta owns seven of the most intrusive apps identified in the study. These include Facebook, Messenger, and Meta AI. The list also contains Meta Horizon, Meta Ads Manager, Meta Business Suite, and Forum. While other companies gather information for functional purposes, the intensity of Meta's data harvesting sets it apart from its industry peers. This practice turns every interaction into a data point for the company's advertising engine.

The scale of Meta's digital reach

The gap between Meta and other tech giants is wide. While Meta collects 25 data types on average, Google follows with 17. Amazon averages 12 data types, and Microsoft collects 8. Apple remains the least intrusive, gathering only 7 types of data across its apps. These numbers suggest that Meta's business model relies on a much broader range of personal information than the hardware-centric models of Apple or the software-centric approach of Microsoft.

Meta’s apps act like invisible name tags that follow you through different digital rooms. When you use Messenger, the app is not just facilitating a conversation. It is cataloging your location, your device ID, and your interaction patterns. This data is the primary asset for the company. Under the General Data Protection Regulation (GDPR), companies must follow the principle of data minimization. This principle requires that companies only collect data that is strictly necessary for the specific task at hand. The sheer volume of data categories Meta tracks raises questions about whether these apps adhere to that standard.

Google owns the volume while Meta owns the detail

Google adopts a different strategy regarding data collection. The research shows that Google owns the highest number of data-hungry apps. Out of the 40 apps identified as high-intensity trackers, Google owns 29. Meta owns 9 of these apps, and Amazon owns 2. Although Google has more apps that track users, Meta's individual apps are more invasive. A single Meta app often gathers a wider variety of information than a single Google app.

Google's utility apps, such as maps and search tools, collect an average of 17 data types. In contrast, Apple’s utility apps only collect 6 data types. This disparity shows that functionality does not always require extensive data harvesting. A map app needs your location to provide directions, but it does not necessarily need your browsing history or your contact list. The Surfshark data shows that many apps collect information that has no direct link to the service the user is actually using.

The prize of browsing history

Browsing history is one of the most sensitive data points a company can collect. It reveals a user's interests, political leanings, and health concerns. The study found that browsing history is a primary target for several major platforms. Nine Meta apps collect this information. Amazon collects browsing history through 11 of its apps, and Google collects it through 8 apps.

When an app tracks your browsing history, it creates a digital trail of breadcrumbs. This trail allows the company to build a profile that predicts your future behavior. Amazon uses this to suggest products, while Meta uses it to refine its ad targeting. For a user, this means that an action taken on a health website might influence the ads they see on Facebook minutes later. This level of tracking is often hidden from the user because it happens in the background of the operating system.

Why Alexa is the outlier

While Meta dominates the most intrusive list, the single most data-hungry app outside of the Meta ecosystem is Amazon Alexa. This voice assistant collects 28 unique data types. This is more than any single app owned by Meta. The high volume of data collected by Alexa is due to its integration with home hardware and its constant monitoring for voice commands.

Alexa sits in a unique position within the household. It has access to voice recordings, location data, and shopping habits. This makes it a central hub for data collection. Even though Microsoft and Apple have their own voice assistants, their apps do not reach the same level of data intensity as Alexa. This confirms that smart home devices often act as a vacuum for personal information under the guise of convenience.

The legal reality of data minimization

The practice of collecting 25 out of 35 data types clashes with modern privacy frameworks. In the European Union, GDPR Article 5(1)(c) explicitly states that personal data must be adequate, relevant, and limited to what is necessary. If a social media app collects your browsing history and precise location even when you are not using a map or a web browser, it may be in violation of this rule.

In the United States, the California Consumer Privacy Act (CCPA) grants users the right to know what data is being collected. It also gives them the right to opt out of the sale of that data. However, knowing that a company collects 25 different types of data is different from being able to stop the collection itself. Many companies argue that this data is necessary for the "legitimate interest" of improving their services. This legal term refers to a company's right to process data for business reasons as long as it does not override the user's rights. The massive scale of Meta's collection suggests a very broad interpretation of what is considered legitimate.

How to reclaim your digital boundaries

Users do not have to accept these collection practices as an inevitability. There are practical steps to limit how much data these apps can harvest. The first step is to audit app permissions on your mobile device. Both iOS and Android allow you to see which apps have access to your location, contacts, and microphone.

You should also review the "Off-Facebook Activity" setting within your Meta account. This tool shows which third-party websites have shared your browsing data with Meta. You can clear this history and turn off future tracking. While this does not stop all collection, it breaks the link between your activity on other websites and your social media profile. Finally, consider using privacy-focused browsers or extensions that block trackers. These tools function like a digital shield, preventing invisible name tags from sticking to your profile as you move through the internet.

Sources

• General Data Protection Regulation (GDPR), Article 5: Principles relating to processing of personal data.
• California Consumer Privacy Act (CCPA), Section 1798.100: Information Practices.
• Surfshark Research: Data Hungry Apps Study 2024.
• Apple App Store Privacy Labels Guidelines.

Disclaimer: This article is for informational and journalistic purposes only and does not constitute formal legal advice. Privacy laws vary significantly by jurisdiction, and users should consult with a legal professional for specific compliance or rights inquiries.