john spurlock 2018 : "they found that when a user gives facebook a phone number for two-factor authentication or in order to receive alerts about new log-ins to a user’s account, that phone number became targetable by an advertiser within a couple of weeks." gizmodo.com