From stallman.org:
Facebook made deals for phone and computer manufacturers including Apple, Amazon, Microsoft, and Samsung to access data about its useds and their friends as well. These deals seem to still be operative. [1]
When Zuckerberg testified to Congress, he said Facebook had stopped doing this years ago [2]. Apparently he lied.
FB's entire business model is fundamentally in conflict with any semblance of privacy. Why anyone believes anything that comes out of Zuckerberg's mouth is beyond me. FB is built around exploitation of user ignorance, apathy, and unwarranted trust.
Make no mistake, no matter how much these dangerously charismatic CEOs speak about positive changes to society, modern large tech companies are 100% self serving and always engaged in carefully prepared corporate doublespeak. They don't give any kind of a shit about your privacy when it is directly tied to the bulk of their revenue. What motivation does fb actually have to delete facial recognition data like they claim, as opposed to just quietly storing it somewhere on the back end? There's no legal requirement and if they get caught, the only people who would care are the kind who by and large have already moved off FB. Meanwhile the upside is huge for future facial recognition applications - this is a massive goldmine of very sensitive personal data.
They've surely done many things you don't like, but they've not lied about doing those things.