BEHIND THE SCORES
Same score. Completely different story.
Facebook and TikTok both score 12/20 - Developing. Here is exactly how we scored each one and the specific evidence behind every number.
SCORE SUMMARY
The numbers at a glance.
Same score. The shapes could not be more different.
THE KEY INSIGHT
Facebook tells you everything, then makes it impossible to act on.
Facebook scores 4 on both Transparency and Clarity - the policy is easy to find and genuinely readable. It scores 1 on both Consent and Control. The information is there but the power is not.
​
TikTok is the mirror image. It scores 0 on Consent - the only brand in our dataset to receive a zero on any dimension. No notice, no banner, no opt-out. But it scores 4 on Control - account deletion is easier on TikTok than on any other brand we have scored.
Consent measures the gate - what happens before data is collected. Control measures the lever - what happens after. Facebook locks the lever. TikTok removes the gate entirely.
Both score 12 but neither is designed around the user.
12/20
DEVELOPING
4
Transparency
How many clicks to find the privacy policy from the homepage?
Privacy Policy is linked directly in the homepage footer - 1 click from the homepage. Opens as a well-structured navigable web page with section navigation, an effective date, and plain-language highlight summaries throughout. Not a PDF.
Facebook has invested seriously in making its policy accessible and findable. This is the ceiling score - and it makes the Consent and Control scores harder to dismiss as oversight.
1
Consent
Does the site give you a meaningful choice about cookies and tracking before data is collected?
No cookie banner appears on first load. No guest-accessible opt-out exists on the homepage. The "Ad choices" link in the footer leads to a Help Center article requiring login and a 7-step process to reach ad preferences. Browser cookie controls are the only option offered to logged-out visitors - which is deflection, not consent.
Facebook offers no meaningful gate. The contrast with its Transparency score of 4 is the defining finding: the policy is easy to find and clearly written, but the choice about whether to be tracked is never offered.
4
Clarity
What reading grade level does the privacy policy score on Hemingway Editor?
Grade 9 on Hemingway Editor - high school level. The highest Clarity score observed across all brands scored so far. Facebook has invested in making an extremely long policy genuinely readable, including section highlights and plain-language summaries throughout.
1
Control
How many clicks to reach data settings and can you delete your account yourself?
Account deletion requires 6 clicks: profile picture → Settings & Privacy → Settings → Accounts Center → Manage accounts → Manage → Deactivation or deletion. Self-serve deletion exists but is buried deep within a convoluted multi-layered settings architecture.
Facebook tells you everything clearly, then makes it as hard as possible to do anything about it. The policy scores 4 on Transparency and 4 on Clarity. The controls score 1.
2
Empathy
Find the support page - how many clicks and is there a way to speak to a human?
Help Center accessible in 1 click from the homepage footer. No human contact available at any point - no phone, no chat, and no email. When asked directly in the chatbot for human support, the response confirmed that no human agent exists.
OVERALL FINDING
Facebook presents a striking split. It scores at the ceiling on Transparency and Clarity as the policy is easy to find and genuinely readable. It scores at the floor on Consent and Control. The gap between information quality and actual user control is the defining finding. Facebook tells you everything clearly, then makes it as hard as possible to do anything about it.
TikTok
12/20
DEVELOPING
3
Transparency
How many clicks to find the privacy policy from the homepage?
Privacy Policy accessible in 2 clicks via "Terms & Policies" in the persistent left sidebar (expand → Privacy Policy link). Opens as a navigable web page with section navigation, last updated date, and Canadian version automatically displayed. No traditional footer exists due to infinite scroll content - the sidebar serves this function persistently.
0
Consent
Does the site give you a meaningful choice about cookies and tracking before data is collected?
No consent mechanism exists for a first-time visitor. TikTok serves content immediately on first load with no cookie banner, no consent notice, and no opt-out mechanism anywhere observable. Data is collected without any notice to the visitor.
TikTok is the only brand in our dataset to receive a score of 0 on any dimension. The gate does not exist. This is not a dark pattern - it is the absence of a pattern entirely.
3
Clarity
What reading grade level does the privacy policy score on Hemingway Editor?
Grade 12 on Hemingway Editor - senior high school level. The policy opens as a navigable web page with clear section navigation. Readable without being exceptional.
4
Control
How many clicks to reach data settings and can you delete your account yourself?
Account deletion visible immediately on the first settings screen - accessible in 2 to 3 clicks: profile → settings → delete account. Privacy controls also visible on the same screen. The most accessible account deletion path observed across all brands scored so far.
TikTok scores 0 on Consent and 4 on Control. It collects data without asking, then makes it easier to delete your account than almost any other brand we've scored so far. That contradiction is the defining finding of this comparison.
2
Empathy
Find the support page - how many clicks and is there a way to speak to a human?
Help accessible in 2 clicks via sidebar: Terms & Policies expand → Help. Opens a standard FAQ and topic-based support page. No human contact available: no phone, no email, and no live chat.
OVERALL FINDING
TikTok is the most contradictory brand scored so far. It scores at the ceiling on Control - account deletion is easier to find than on any other brand scored - while scoring at the floor on Consent with no tracking notice whatsoever for a first-time visitor. It invests in making controls easy to use once you are inside the platform, but collects data from visitors before they have agreed to anything.
How we scored these brands
Both brands were scored using the Data Human Index - a five-dimension framework that measures only what any visitor can observe from the outside. No inside access, no proprietary tools, no assumptions about what happens on the server.
​
Each brand was scored in a private browser window to ensure cookie banners appeared as they would for a first-time visitor. Control dimensions were scored while logged in to a standard user account. All observations were recorded in April 2026 and reflect the Canadian version of each site.
​
The DHI does not measure server-side data practices, internal infrastructure, regulatory compliance, or what brands do with data once collected. It measures the human experience of data - what a real person encounters when they try to understand, consent to, or control their data with a brand.