Meta's off-platform ad pipeline is default-on, and the off switch comes in four parts

The control sits at the wrong end of the pipe. A retailer, app or other business sends Meta information about a visit or a purchase, and the setting decides only whether Meta may use what has already arrived ^[2][5]. Flipping it changes nothing about the sending, and nothing about what Instagram records inside its own walls ^[6]. It is a use restriction rather than a data restriction, and the party doing the sending never sees it.

What survives the switch is most of the model. Ads can still be shaped by the accounts you follow, the Reels you engage with, searches, ad clicks, profile details, and customer lists uploaded by advertisers ^[7]. That last item is worth pausing on: a merchant handing Meta a list with your email on it is off-platform data arriving through a door the off-platform toggle does not cover.

The European Region gets a second lever, narrower than its name suggests. The less-personalized option uses fewer signals, but Meta says it can still use age, location, device information, ad interactions and the content on screen during the current session ^[8]. A system permitted to read the screen in front of you is limited in memory, not in perception.

The sequence tells the rest. Meta began using interactions with its AI features as personalization signals on December 16, 2025 in most regions ^[9], and the consolidated control started rolling out about seven months after that ^[1][2]. There is no separate setting for someone who wants to keep chatting with Meta AI while excluding those conversations ^[10], and Meta AI already draws on Facebook and Instagram activity to tailor its recommendations ^[11]. The assistant inherited the advertising plumbing before it inherited a consent surface.

Then count the labor. Following Engadget's walkthrough end to end means four separate screens ^[1]: the Accounts Center control ^[1], the phone's tracking or permissions panel, which belongs to Apple or Google rather than Meta ^[12], the contact upload switch ^[13], and the list of accounts sharing one Accounts Center ^[15]. Each has a different scope and each fails in its own way. Turning off Android location removes one direct source while Meta may still estimate the same thing from IP address, network information and device signals ^[14]. Turning off contact syncing leaves already uploaded contacts in place, and Meta says removing them can take up to 90 days, roughly a full quarter ^[13][3]. Pulling an account out of an Accounts Center may disable shared logins and deletes nothing ^[15].

Meta's denial about the microphone is worth taking at face value, because the alternative explanation would be easier to escape ^[2]. Eavesdropping is a defect with a patch. A commercial data supply chain is a standing arrangement between Meta and the businesses feeding it, and the user's position in that arrangement is a checkbox over downstream use. Which is why the remedy Engadget documents runs to four screens instead of one ^[3].