Without my ever giving them my credit card number, they or the attendant ad agency have cross-linked my credit card with my Facebook account. :-(
This may be more noticeable to me, because Facebook on my phone is one of the few places I haven't blocked ads. I don't block them out of spite; I block them because, 1) They completely distract me, when they move and make noise; 2) I've yet to encounter an ad network I trust.
I simply don't do much secure stuff on my phone, and I use a separate email account on it that's not tied to anything significant.
Facebook on my phone is also eerie in presenting content and ads that relate to what I've recently been doing. If they aren't outright monitoring my conversations, they are damned good at determining my location (while my GPS is turned off) and making remarkable inferences as to what the topics at hand likely were.
If it weren't the default means my wide-ranging friends use to keep in touch, I'd by having a serious conversation with myself today as to whether it was time to uninstall it. I'm still debating; just don't want to fall out of touch with those friends.
P.S. As has been mentioned here frequently, FB maintains shadow profiles for people who don't have Facebook accounts.
Facebook is becoming a primary connection / cross-reference between market activity (e.g. shopping) and personal data (not just ZIP, age, etc. demographics, but likes and activities, and that all-important social network).