It seems that Facebook JS SDK also sends user behavior back to Facebook even when user doesn't click on the "Sign in with Facebook" button: https://simplelogin.

It seems that Facebook JS SDK also sends user behavior back to Facebook even when user doesn't click on the "Sign in with Facebook" button: https://simplelogin.io/blog/do-not-use-facebook-sdk/ https://simplelogin.io/blog/do-not-use-facebook-sdk/ On the Web, it's recommended to use a generic OAuth library instead of integrating Facebook JS SDK. On mobile, this is almost impossible though as Facebook doesn't implement the OAuth PKCE flow.