PUBLIC - This article does not require an IPVM subscription. Feel free to share.
When a company defends its data practices by invoking a platform defined by a decade of documented privacy scandals, the comparison invites more scrutiny than it deflects.
Flock Chief Legal Officer Dan Haley compared the company's data-sharing model directly to Facebook's friend-request system.
It's very much like social media, it's the law enforcement agency, whether it's federal or local, you know, the next, the town next door, literally through the system issues a sharing request. Will you share your data with me, Town B? And Town B either accepts that I'm your friend. Or like Facebook or rejects it. I'm not your friend, I don't know you, I'm not going to share my information with you. And it is truly as simple as that. And it is absolutely controlled by the user, the community using Flock. — Seattle 770 AM
Haley offered the comparison while responding to the host's questions about warrantless access and immigration enforcement, as part of his broader claim that municipalities control their data. The parallel is strong. It just runs in the opposite direction.
Both Platforms Have Real Value
Facebook connected people across distances in ways that were not previously possible: reuniting old friends, organizing communities, maintaining relationships across borders. Flock has helped recover stolen vehicles, locate missing children, and solve serious crimes. Both platforms produce value.
The harder question is what both platforms cost. Each derives its power from aggregating data at massive scale, and each is focused on aggregation, expanding the network first, weighing the harms later, and restricting only under intense public and legal pressure.
Users Are the Product, Except Flock's Never Signed Up
Facebook's famous critique: if the product is free, you are the product. At Facebook, users sign up, agree to terms of service, and receive something in return: a social network, messaging, photos. The people whose plates Flock scans never sign up, never agree to be part of Flock's private network, and have no ability to opt out. In most cases, they have no idea they are being scanned. That is changing as the controversy around Flock has grown, but awareness is not the same as consent.
Flock and its supporters argue that license plates are visible in public space, where courts have held there is no reasonable expectation of privacy, and that the comparison to Facebook's handling of personal data therefore does not hold. Haley himself has acknowledged the limits of that position: he admitted on a podcast that a warrant requirement is coming: "That day in the future is out there." A single plate on a public road may carry no privacy expectation. A cross-jurisdictional database of billions of reads is a different matter, and Flock's own CLO has said so.
Twenty billion plate reads per month flow through Flock's network, per Flock. Facebook's users are the product. The public is the raw material for Flock's immensely profitable private business.
The Architecture of Expansion
Zuckerberg described users who submitted their data: "They 'trust me.' Dumb fucks," in a 2004 instant message. That attitude toward users shaped how Facebook built its platform: sharing as the default, privacy as the obstacle. Flock's network architecture shows the same design philosophy.
Sharing requests from neighboring agencies arrive before a contract is even signed. New agencies receive a default email: "Great news, your network is growing!" Administrators can configure automatic sharing within a 50–500-mile radius. The system is designed to sweep "all of those new organizations we're bringing into the Flock Safety system" through bulk monthly sharing.
The results are documented. One city was on Flock's national network for "well over a year" without knowing it. A second city discovered 250-plus agencies had conducted roughly 600,000 unauthorized searches through a feature active without the city's knowledge. A third had its system searched more than 13,000 times by outside agencies due to "misconfiguration."
Flock constructs conditions in which expansion is the path of least resistance, then credits the result to local choice. Haley's assurance that data is "absolutely controlled by the user, the community using Flock" runs directly into this documented record.
Network Effects Are the Business Model
Facebook and Flock share the same underlying business logic: the more participants in the network, the more valuable their business becomes, and the stronger the competitive position against rivals. Both companies have publicly framed network growth as a byproduct of user or customer choice. The financial reality runs the other way. For Facebook, more connections meant more data, more data meant more targeted advertising, and more advertising meant more revenue. Maximizing the network was the business.
Flock operates similarly. The company markets its platform as the National LPR Network, promoting "coast-to-coast reach" and the ability to "track suspects across counties and state lines with seamless data sharing." An a16z investor called it Flock's most compelling customer value proposition. Flock itself disclosed to Sen. Wyden that 75% of its law enforcement customers were enrolled in the National Lookup Tool. Every agency that joins makes the network more valuable to Flock's own business. That is the product. Attributing network growth to local choice obscures who benefits most from that growth.
"Local Control" Is Privacy Theater
Facebook claimed for 15 years that users controlled their privacy settings. The FTC documented deceptive dark patterns in those settings from at least 2009. Flock's equivalent claim is that communities control their data. The record shows the same gap between claim and reality: Norfolk PD stating that reviewing audit logs was "entirely too time-consuming," officers sharing passwords to bypass search filters, and cities discovering unauthorized federal access only through media records requests rather than their own oversight. The control is nominally real; in practice it is the setting nobody checks, the email nobody scrutinizes, and the default nobody reverses.
"We Don't Sell Data"
Zuckerberg under congressional questioning: "We don't sell data; we don't allow anyone to sell data." Flock CEO Garrett Langley in November 2025: "Flock does not share or sell your data, and never will." Three months later, Flock removed that promise from its contracts entirely, while granting itself perpetual rights to customer footage. Both "we don't sell data" claims are technically defensible. Neither is what it sounds like.
Both Restricted Sharing Under Intense Public and Legal Pressure
Facebook meaningfully addressed privacy defaults only after the 2011 FTC consent decree, Cambridge Analytica, GDPR, and sustained congressional pressure. Flock restricted data sharing after Illinois found it violated state law, California plaintiffs filed class action lawsuits seeking billions of dollars, Sen. Ron Wyden, D-Ore., wrote to the company, and dozens of cities cancelled contracts. Flock's March 2026 "enhanced guardrails" were largely a repackaging of features that had existed since 2025, as IPVM's coverage documented. Neither company led on privacy. Both followed legal compulsion.
Both Companies' Executives Misled the Public
Zuckerberg testified before Congress that Facebook did not sell user data and that users controlled their privacy, claims that FTC enforcement, the Cambridge Analytica settlement, and congressional findings each contradicted. When challenged, his posture was consistent: characterize critics as misunderstanding the product, not raising legitimate concerns.
Flock's executives have followed the same pattern. CEO Langley publicly guaranteed Flock would never sell data, then quietly removed that promise weeks later. Two Flock executives directly contradicted each other on video about whether the system tracks individuals.
Haley himself, the same executive who made the Facebook comparison, slipped on a separate broadcast and said the system "points to a person or a vehicle, rather, not a person, a vehicle," correcting himself three times in two seconds. "Person" was his first instinct. CEO Langley has called a privacy advocacy group a "terroristic organization" and accused critics of wanting to "defund the police, weaken public safety, and normalize lawlessness." Combativeness toward critics follows from deception: when your public claims cannot withstand scrutiny, attacking the people doing the scrutinizing becomes the strategy.
Both Platforms Have Left People Harmed
Facebook drew sustained criticism for treating its connecting-people mission as justification for any outcome: a 2016 internal memo by executive Andrew Bosworth, leaked in 2018, argued "maybe someone dies in a terrorist attack coordinated on our tools, and still we connect people." Zuckerberg publicly distanced himself from it. Bosworth never retracted it.
Flock has operated on a structurally identical logic. Officers across multiple jurisdictions used the platform to stalk ex-partners, a pattern Haley himself acknowledged as the most common form of system abuse. San Francisco agencies ran 1.6 million illegal out-of-state searches. ICE accessed Illinois data in violation of state law. In each case, the architecture of frictionless sharing preceded any restriction, and restriction came only when the harm became legally or politically unavoidable.
Conclusion
Facebook built its network on users who chose to join. Flock built its network on 20 billion monthly reads of people who never agreed to be part of it. Haley closed the interview by saying "none of us wants to live in a surveillance state." The analogy just misses what that phrase means to the people who never opted in.