Skip to main content

Did you give Facebook your phone number? You can’t delete it or make it private

Setting up two-factor authentication is usually a recommended move to keep important accounts secure — but on Facebook, adding a phone number could impact privacy. After a tweet from a user complaining that Facebook required a phone number for two-factor authentication, Facebook’s iffy data practices are once again in the spotlight, this time with what actually happens to your phone number when adding two-factor authentication.

The practice coming into question isn’t new — just highlighted by a new round of complaints. Facebook has offered two-factor authentication since 2011. The company says that phone numbers added to an account, including areas outside of two-factor authentication, are then linked to the account. Facebook uses those phone numbers for more than just security, using them for ad targeting if a business also has that same phone number and allowing other users to find their profile by typing the phone number into the search bar.

The tweet sparking the latest round of criticism comes from the owner of Emojipedia, Jeremy Burge, who added a phone number during a time when Facebook required managers of large Pages to use two-factor authentication. While Facebook no longer requires a phone number for accounts with a large number of followers, the network also doesn’t appear to have an option to delete the information once added to the account.

As Burge points out in his tweet, there is no way to disable the tool where other users can look you up by phone number. Users can adjust the privacy settings to change the settings from “everyone” to just “friends,” but there’s no option to disable entirely. Burge points out that Facebook shares that phone number with Instagram and WhatsApp. He says that when he was forced to sign up for two-factor authentication, Facebook said it was “to help secure your account.” Now that statement tacks on “and more” at the end.

So what are Facebook users to do? Well, if you already provided Facebook with your phone number, there isn’t an option to delete it. (In some cases, Facebook may already know your phone number from when users could give Facebook access to their phone contacts to find their friends.)

But for users who haven’t yet given away their phone number, third-party apps will allow for two-factor authentication without a phone number. Apps like Google Authenticator and LastPass generate a unique code to activate two-factor authentication instead of a phone number. 

Editors' Recommendations

Hillary K. Grigonis
Hillary never planned on becoming a photographer—and then she was handed a camera at her first writing job and she's been…
Facebook admits it was listening to your private conversations, too
Facebook Pages

Facebook outsourced contractors to listen in on your audio messenger chats and transcribe them, a new report reveals. 

Bloomberg reports that the contractors were not told why they were listening in or why they were transcribing them. Facebook confirmed the reports but said they are no longer transcribing audio. 

Read more
Facebook let advertisers target you using two-factor authentication numbers
The FTC logo on a building.

We finally have some details about the $5 billion settlement between the Federal Trade Commission (FTC) -- and exactly how Facebook might have violated your privacy.

The Washington Post reports that the yet-to-be-released complaint that will accompany the settlement focuses on two privacy violations. The first involves Facebook’s two-factor authentication security feature, which allows users to log in and verify their identity through a text message code sent to the phone number that they enter. Allegedly, advertisers used these phone numbers to target Facebook users without their consent. 

Read more
Gmail tracks everything you purchase and you STILL can’t delete it or opt out
Trusted Contacts

In May, CNBC discovered that Google tracks your purchase history through a little-known Purchases page that pulls information from Gmail emails like order confirmations. It tracked both physical purchases and online ones, and there is no setting in the Data & Personalization page on Google Account to turn the feature off.

Google claimed that the data could be deleted if users didn't want the company to know everything they bought online. But in practice, deleting purchases was not so easy. Purchases cannot be deleted in bulk, and the only way to remove an item from the Purchases page is to delete the email from your Gmail inbox.

Read more