Why Meta’s ad-free plan still watches what you do

Meta’s European subscription offers Facebook and Instagram users a choice that sounds straightforward: pay a monthly fee and use the services without personalised advertising, or continue using them for free while accepting targeted ads. The arrangement was introduced in response to European privacy rules, but “ad-free” does not mean “untracked”. Removing advertising from the screen does not remove the large system of account records, device signals, behavioural data and security monitoring that keeps Meta’s platforms running.

That distinction matters in Australia, where people may see the European offer as a preview of what could eventually arrive here. An Adelaide Instagram user, a parent in suburban Melbourne and a small business owner promoting products in Sydney all interact with Meta’s data systems in different ways. The commercial purpose may change when advertising is switched off, but the platform still has strong reasons to observe activity.

What the subscription actually changes

Meta’s paid plan primarily changes the advertising experience. A subscriber can use Facebook and Instagram without the personalised ads that normally appear between posts, Stories and Reels. In the European Economic Area, users have also been presented with choices around personalised and less-personalised advertising, following regulatory pressure over consent and behavioural profiling.

The subscription does not turn Facebook or Instagram into private, local applications that process everything only on a phone. Meta still needs to authenticate an account, deliver posts, recommend content, prevent fraud, detect abuse and keep its services available. Those functions require information about logins, interactions, devices, approximate location, network connections and account relationships.

In other words, the payment removes one use of personal information rather than ending collection altogether. Meta can stop using certain activity to select ads while continuing to record that activity for other purposes. A person who pays may see fewer commercial inferences, but they have not disappeared from the platform’s data environment.

Activity inside Facebook and Instagram remains visible

Everyday actions create a detailed behavioural record. Watching a Reel for several seconds, scrolling past a post, opening a profile, reacting to a comment or searching for a topic can help Meta understand how its services are being used. Some of these events are needed for product analytics and performance measurement, while others influence ranking and recommendations.

The distinction between advertising and personalisation is easy to miss. A subscriber might not receive a targeted ad about running shoes after watching fitness videos, yet the same viewing history may still help Instagram decide which fitness creators to show next. It can also affect suggestions for accounts to follow, groups to join or subjects likely to hold attention.

Meta’s policies describe multiple purposes for handling information, including safety, service improvement, research and communications. Those purposes can involve similar raw signals. The fact that a click is no longer used to choose an advertisement does not make the click invisible to the platform.

This is why a paid account can still feel highly tailored. The feed can remain shaped by previous behaviour, social connections and predicted interests. Personalised content recommendations are not identical to personalised ads, but they rely on some of the same surveillance infrastructure.

Off-platform tracking is a separate question

Meta has historically received information from websites and apps through tools such as the Meta Pixel, Conversions API, social plug-ins and login integrations. These tools can tell the company that a browser visited a retailer, completed a purchase or interacted with an embedded feature. In Australia, that might mean browsing a Brisbane property website or buying concert tickets through a page that reports activity back to Meta.

Paying for an ad-free subscription does not automatically make every external website stop sending data to Meta. The precise result depends on the user’s choices, the business’s implementation, device settings, cookies and the permissions that apply in the relevant jurisdiction. A person can therefore have no ads in Instagram while information about activity elsewhere continues to be collected or matched for measurement, security or service purposes.

The key issue is purpose. Meta may say a signal is used to measure conversions, prevent fraudulent activity or maintain the service rather than target advertising. That may be legally significant, but it remains a form of data transfer and observation. Users often experience all of these processes as one thing: a company learning what they do across the internet.

A browser’s privacy controls can reduce some of this exposure, though they are not a complete shield. Blocking third-party cookies, limiting app permissions and avoiding social logins can help. So can reviewing Meta’s Accounts Centre settings instead of assuming that an ad-free subscription has handled every privacy choice.

The European model emerged from regulatory pressure

Meta introduced the “pay or consent” approach after European regulators questioned whether behavioural advertising could rely on freely given consent when refusing it meant losing access to a major social service. The company’s argument was that users could either accept personalised advertising or pay for an alternative without ads, helping preserve a business model that had traditionally depended on personalisation.

Privacy regulators and civil society groups have challenged whether that is a genuine choice. A subscription costing several euros each month can be a meaningful expense, particularly when using one service often involves both Facebook and Instagram. Critics argue that users may feel pushed towards surveillance because declining it is expensive or because the free alternative still involves complex settings.

The European Data Protection Board and national authorities have examined whether consent under the General Data Protection Regulation is sufficiently voluntary in this context. The European Commission has also scrutinised Meta’s approach under the Digital Markets Act. These investigations do not mean every part of the model is automatically unlawful, but they show why a simple “pay to avoid ads” explanation is incomplete.

For readers who follow technology policy, this is a useful case study in how privacy law operates in practice. The dispute is not just about whether advertisements appear. It concerns power, dependence, meaningful consent and whether a platform can make privacy feel like a premium feature.

Australia is not receiving the same bargain

Australian users are generally governed by a different legal and commercial arrangement. The Privacy Act and the Australian Privacy Principles regulate the handling of personal information, but they do not reproduce the GDPR’s entire consent framework. The Australian Competition and Consumer Commission has also examined digital platforms, data practices and competition, while the Office of the Australian Information Commissioner handles privacy oversight.

That means someone in Perth or Canberra should not assume that subscribing to an EU-style plan, if offered, would create identical rights. Meta can provide different settings, prices and explanations in different markets. An Australian account may continue to see targeted advertising under the terms that apply locally, even if a European user is offered a paid alternative.

Australian users are also familiar with a fragmented digital ecosystem. A person might use Facebook Marketplace to sell a couch, Messenger to organise a family barbecue, Instagram to follow a local café and WhatsApp to speak with relatives overseas. These services can make a single company feel woven into ordinary life, which makes opting out harder than simply deleting one app.

The local regulatory conversation is moving as well. Proposed and ongoing reforms to Australia’s privacy framework have focused on stronger protections, clearer consent and greater accountability for data holders. But until specific rules take effect and are tested, users should treat Meta’s privacy controls as practical risk-reduction tools rather than guarantees of European-style protection.

The information can still be valuable without ad targeting

Data has value beyond selecting the next sponsored post. Usage information helps Meta identify technical problems, measure feature adoption, understand how people move between services and detect unusual behaviour. A platform can also use aggregated or de-identified information for analysis, although aggregation does not necessarily erase every privacy risk.

Account data has a social dimension too. The people a user follows, the groups they enter, the posts they save and the communities they interact with can reveal political interests, health concerns, religious affiliation or personal relationships. Even when those details are not used to sell an advert, they remain sensitive information in the broader sense.

Recommendation systems can also shape attention. If Instagram learns which topics make somebody stop scrolling, it can prioritise similar material and reinforce a narrow information diet. For a useful broader look at attention, habits and technology, these attention and privacy notes offer a helpful perspective on how digital systems compete for time as well as collect data.

This matters because surveillance is not defined only by the final commercial use of a profile. It also describes the continuous observation required to build, maintain and act on that profile. An ad-free account may reduce one consequence while leaving the underlying observation largely intact.

What users can check before paying

A subscriber should read the plan’s current terms, privacy policy and consent settings rather than relying on the label “no ads”. The important questions include what data Meta still collects, which purposes remain active, whether activity from other services is connected, and whether recommendations continue to be personalised.

Accounts Centre is a practical place to review connected experiences, ad preferences, off-Meta activity and information used across Facebook and Instagram. Users can disconnect some external activity, limit contact uploading and review applications that have access to their account. These settings may change the data flow without eliminating it.

On an Android phone or iPhone, system-level permissions are equally important. Location access, contacts, photos, microphone use and background activity should be limited to what is necessary. A person who uses Instagram to share a few holiday snaps from the Gold Coast does not necessarily need to grant permanent access to every contact or continuous location history.

It is also worth considering the value exchange. Paying to avoid ads can be reasonable for someone who dislikes targeted marketing, but the payment should not be mistaken for a privacy subscription in the broadest sense. For a wider view of protecting online information after death, this digital will guide shows why account control extends beyond daily advertising settings. Readers interested in independent technology commentary can also explore Zack Michaels for another perspective on privacy and digital life.

Meta’s EU ad-free subscription model therefore changes the visibility and commercial use of some advertising signals, not the company’s need to monitor activity across its platforms. The practical takeaway is simple: treat “ad-free” as an advertising preference, then separately review account activity, off-platform data sharing, app permissions and recommendation settings.