My roommate received this device too. Having observed its activity. It doesn't steal any data. It simply setups a ssh dynamic tunnel and uses your network IP

My roommate received this device too. Having observed its activity. It doesn't steal any data. It simply setups a ssh dynamic tunnel and uses your network IP for accessing your Facebook account which you sold. Why? Because Fb locks the account the moment it's accessed from a different network from a different device. Can it steal your data? Absolutely yes! Does it steal? Probably no. Afaik, all they want is your fb account for which they pay you.