Facebook collects phone numbers of random people, if a FB user uploads their contact list. Facebook collects data in shadow profiles. Facebook collects login

Facebook collects phone numbers of random people, if a FB user uploads their contact list. Facebook collects data in shadow profiles. Facebook collects login credentials for email accounts. Facebook asks for phone numbers for "two-factor authentication" and then uses it in different ways. Similar for Google. Most default options are enabled if you set up an Android phone (and these options and settings track you). Opt-in? Off by default? Nothing. Just to name one example. Dark patterns to give consent everywhere, like buttons suggesting that opt-in is the only way to do it and so on. All of this is kinda known, and illegal under GDPR. Consequences so far? None.