I haven't used FB's ad creation in depth, but I don't think it would take much personal-type information to do this. One of the biggest ways FB offers to target is by the pages/groups a user likes/is a fan of/whatever they call it now. So you could narrow down pretty well just using the information that's available on most people' public search result pages.