Before 2016, one of Facebookâs regular protocols was an option for users to verify their accounts using email passwords. Users were informed if they chose this option, all of their email contacts would be uploaded as well, which would let the users see which of their friends were already on Facebook. (The info was also used by Facebook to better target ads.) Even though Facebook claimed the email passwords were never stored, the practice of asking users to enter such sensitive info and pulling all their contact info did not sit well with many cybersecurity experts, and in May 2016 the company changed that feature.
