It seems to be pretty basic. They access the photos within the photo library and the location of the device(both of which you've most likely granted Facebook to

It seems to be pretty basic. They access the photos within the photo library and the location of the device(both of which you've most likely granted Facebook to access). FB then cross reference with any other devices nearby and any identified objects within the photos are cross referenced with their ad inventory.