Among other transgressions, Facebook gives your phone number to advertisers if you set up two-factor authentication.