[underpand]

How long would the report be if you have your profile privacy on lockdown? ie. all public profiles are private and you don't reuse usernames

Are they able to do more nefarious things like use fingerprint/IP/device history to connect random accounts together?

[dylan604]

Or just ask Facebook about everything they've linked together. Maybe sign up for some sort of FB service, and then create a business model that abuses the access you've been granted to gain the information you're ultimately trying to get. If questioned about it, just blame some rouge employee as a scapegoat for being a bad apple abusing the trust that FB granted.